https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2023-36520.htmlhttps://patchthecve.com/cve/CVE-2023-36520.htmlWed, 17 Jun 2026 06:06:27 +0000MEDIUM 5.4: Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12.https://patchthecve.com/cve/CVE-2022-4115.htmlhttps://patchthecve.com/cve/CVE-2022-4115.htmlWed, 17 Jun 2026 05:19:59 +0000MEDIUM 5.4: The Editorial Calendar WordPress plugin before 3.8.3 does not sanitise and escape its settings, allowing users with roles as low as contributor to inject arbitrary web scripts in the plugin admin panel, enabling a Stored Cross-Site Scripting vulnerability targeting higher privileged users.https://patchthecve.com/cve/CVE-2013-10023.htmlhttps://patchthecve.com/cve/CVE-2013-10023.htmlTue, 16 Jun 2026 23:50:33 +0000MEDIUM 6.3: A vulnerability was found in Editorial Calendar Plugin up to 2.6 on WordPress. It has been declared as critical. Affected by this vulnerability is the function edcal_filter_where of the file edcal.php. The manipulation of the argument edcal_startDate/edcal_endDate leads to sql injection. The attack