Matthew Fries vulnerabilities

Products

• MF Gig Calendar 3

Latest Matthew Fries CVEs

Newest publication first

1. CVE-2024-33651 WordPress MF Gig Calendar plugin <= 1.2.1 - Cross Site Request Forgery (CSRF) vulnerability

   Published 2024-04-26

   High·CVSS 8.8 EPSS 0.23%

   Cross-Site Request Forgery (CSRF) vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig Calendar : from n/a through 1.2.1.

2. CVE-2023-50842 WordPress MF Gig Calendar Plugin <= 1.2.1 is vulnerable to SQL Injection

   Published 2023-12-28

   High·CVSS 8.8 EPSS 0.48%

   Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig Calendar: from n/a through 1.2.1.

3. CVE-2023-37970 WordPress MF Gig Calendar Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)

   Published 2023-07-27

   Medium·CVSS 5.4 EPSS 0.37%

   Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Matthew Fries MF Gig Calendar plugin <= 1.2 versions.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.