WordPress Event Easy Calendar plugin version 1.0.0 suffers from cross site request forgery, improper input validation, and cross site scripting vulnerabilities…. WordPress Event Easy Calendar plugin version 1.0.0 suffers from cross site request forgery, improper input validation, and cross site scripting vulnerabilities.

Read more http://packetstormsecurity.com/files/123132/wpeventeasycalendar-xssxsrf.txt