Skip to content
PluginCanary

Calendar

by Kieran O'Shea · 4,000+ active installs · Checked 3 Nov 2026
Healthy1 Warning

Healthy: maintained, last release 16 May 2026, 2 releases in 24 months, no unpatched vulnerabilities.

Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4.

81/ 100 Canary Score
Sub-scores for Calendar
Ownership100
Maintenance70
Security90
Support70
Reputation70

How the score works

Quick answers

Is Calendar still maintained?
Yes. Last release 16 May 2026, 2 releases in the last 24 months. 16 May 2026 · wordpress.org
Who owns Calendar, and has it changed hands?
No change recorded. Main committer KieranOShea since May 2007. 3 Nov 2026 · SVN log
Was Calendar removed from wordpress.org?
No. Listed on wordpress.org as of 3 Nov 2026. 3 Nov 2026 · wordpress.org
Is Calendar safe?
6 known vulnerabilities, all fixed (latest in 1.3.18). Not on the exploited list. 6 Jul 2026 · Wordfence Intelligence
Is the latest Calendar update safe to install?
No ownership change before 1.3.18. No one-star spike after it. 16 May 2026 · Release history

Active signals

Facts we detected, with links to the source.

  • WarningMNT-2Tested up to WordPress 6.9.11, 2 major versions behind 7.1.4. Plan a replacement if the plugin is important to your site.3 Nov 2026Evidence

Ownership timeline

Who commits to the plugin's code on wordpress.org, over time.

Committers and their active periods
KieranOShea7 May 2007 to 16 May 2026, 142 commits

1 committer recorded. No ownership change since 2007.

Maintenance

Last release
6 months ago
Releases, 24 months
2
Tested up to
6.9 vs 7.1
Requires PHP
not stated supported 8.2+
Releases per quarter
Releases per quarter for Calendar
Q1 20240
Q2 20241
Q3 20241
Q4 20240
Q1 20250
Q2 20250
Q3 20250
Q4 20251
Q1 20260
Q2 20261
Q3 20260
Q4 20260

Last release 16 May 2026. Tested up to 6.9, 2 major versions behind WordPress 7.1.

Reputation

Last 90 days: no reviews. Lifetime: 3.7.

Rating distribution
5 star12
4 star4
3 star2
2 star1
1 star5

Security record

2 vulnerabilities in 24 months (6 on record), all patched (latest fixed in 1.3.18).

Show 6 patched vulnerabilities
PublishedIssueCVSSAffectedFixed inDays to patch
6 Jul 2026Calendar <= 1.3.17 - Authenticated (Contributor+) Stored Cross-Site Scripting6.4<= 1.3.171.3.18Patched before disclosure
22 Dec 2025Calendar <= 1.3.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'event_desc'6.4<= 1.3.161.3.17Patched before disclosure
29 Apr 2024Calendar <= 1.3.14 - Authenticated (Contributor+) SQL Injection via Shortcode8.8<= 1.3.141.3.1533
30 Oct 2018Calendar <= 1.3.10 - Authenticated Stored Cross-Site Scripting5.4< 1.3.111.3.1119
8 Nov 2016Calendar < 1.3.8 - Reflected Cross-Site Scripting7.1< 1.3.81.3.8Patched before disclosure
1 Aug 2014Calendar <= 1.3.2 - Cross-Site Request Forgery4.3<= 1.3.21.3.3Patched before disclosure

Sources: Wordfence Intelligence, CISA Known Exploited Vulnerabilities, readme changelogs.

Support

0% of 1 support threads resolved in the last 2 months.

Momentum

4,000+ active installs. History builds with each weekly snapshot.

Weekly downloads, last 27 weeks
Weekly downloads for Calendar
4 May 202675
11 May 20261,594
18 May 2026550
25 May 2026383
1 Jun 2026210
8 Jun 2026222
15 Jun 2026202
22 Jun 2026149
29 Jun 2026151
6 Jul 2026157
13 Jul 2026161
20 Jul 2026180
27 Jul 2026451
3 Aug 2026388
10 Aug 2026190
17 Aug 2026172
24 Aug 2026157
31 Aug 2026174
7 Sep 2026162
14 Sep 2026179
21 Sep 2026193
28 Sep 2026220
5 Oct 2026191
12 Oct 2026178
19 Oct 2026294
26 Oct 2026244
2 Nov 202626

Weekly downloads over the last 4 weeks are 31% below the 27-week average.

Healthier alternatives

Same job, rated Healthy, higher Canary Score and at least 10,000 installs. Never sponsored.

Events Shortcodes For The EventsScore 92 · 10,000+Events Widgets For Elementor And TheScore 91 · 10,000+The Events Calendar Shortcode & BlockScore 91 · 10,000+Sugar CalendarScore 91 · 10,000+Timetable and Event Schedule byScore 89 · 30,000+

Facts

Version1.3.18
AuthorKieran O'Shea
Added7 May 2007
Last updated16 May 2026
Active installs4,000+
Requires WordPress6.2.4
Tested up to6.9.11
Requires PHPnot stated
CategoryBookings & Scheduling > Appointment Scheduling
Tagsdates, times, events, calendar

Other plugins by this author: Yubikey, Last FM, Social View

Questions

Is Calendar still maintained?

Yes. Last release 16 May 2026, 2 releases in the last 24 months.

Who owns Calendar, and has it changed hands?

No change recorded. Main committer KieranOShea since May 2007.

Was Calendar removed from wordpress.org?

No. Listed on wordpress.org as of 3 Nov 2026.

Is Calendar safe?

6 known vulnerabilities, all fixed (latest in 1.3.18). Not on the exploited list.

Is the latest Calendar update safe to install?

No ownership change before 1.3.18. No one-star spike after it.

Data: wordpress.org Plugins API, plugins SVN and Trac, wordpress.org reviews and support forum, Wordfence Intelligence, CISA KEV, NVD.Plugin data refreshed 3 Nov 2026.Report a data issue