My Calendar – Accessible Event Manager

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Refined from the date this plugin crossed into its current band.

No paid tier is visible, so we don't put a figure on revenue or sale value: that would be guessing. The install base is a real asset to an acquirer, just not one public data lets us price.

1. ★★★★★ wpbizopp

   2mo ago

   Nothing intuitive about this plugin… at least the free version. Adjusting the feed and display of events is convoluted like a plugin from 2010. Need to catch up with Gutenberg blocks. All help videos online are from 2013 and nothing available on the plugin’s site to explain how it all routes and works.

   Read on wp.org ↗
2. ★★★★★ hugues7

   3mo ago

   This extension does exactly what I expected from a planner! Excellent!

   Read on wp.org ↗
3. ★★★★★ benjimage

   3mo ago

   Quick modifying events and easier access to CSS would make it unparalleled.

   Read on wp.org ↗
4. ★★★★★ feedsalem

   8mo ago

   Too complicated. Nothing works right. Cannot do basic stuff, like remove the auto inserted calendar that looks terrible.

   Read on wp.org ↗
5. ★★★★★ ransaier

   8mo ago

   Great and very useful calendar plugin. Clean, reliable, and easy to integrate into a website. Highly recommended.

   Read on wp.org ↗
6. ★★★★★ sfg165

   9mo ago

   Really nice plugin for a calendar where the grid view can be nicely customized. I just needed a calendar of events for an HOA Clubhouse that all members could view by month and differentiating between different types of events and this really worked out well. Kudos for a good product…..!

   Read on wp.org ↗
7. ★★★★★ kevinin2d

   11mo ago

   Hey Nice plugin, works great.One minor thing, I see that the modal “close” button is missing a translation option, could you add that?

   Read on wp.org ↗
8. ★★★★★ Andrzej Klasén

   12mo ago

   My Swedish users are asking whether it’s possible to display Week numbers to the left of calendar. I will post it in the Support Forum – thanks a lot!

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 3.7.17 Feature: Add hcard template support for events. Bug fix: Inline template help should always reflect tags, not functions. Bug fix: Admin JS needed to be rebuilt (omitted from 3.7.16). 3.7.17
2. — Version 3.7.16 Bug fix: Change ‘.hide’ to ‘.mc-hide’ to reduce collisions with other extensions. Bug fix: Fix variable type passed for recurring event lists. Bug fix: Mark $name as nullable in CustomEvent. Security: Improve privacy che 3.7.16
3. — Version 3.7.15 Bug fix: Prevent PHP warning if URL host value not parseable in print view. Bug fix: Replace links to removed template tag help with tag help modal. Bug fix: Fix prev/next event navigation when mc_id parameter omitted. B 3.7.15
4. — Version 3.7.14 Bug fix: Removed duplicate array parameters in options installation. Bug fix: Add notice for admins about recurring template tag behavior on single events. Bug fix: Remove static data from wp_update_post , including not 3.7.14
5. — Version 3.7.13 Bug fix: Handle an additional case where changes to wp_kses_hair() in WordPress 7.0 broke legacy templates. 3.7.13
6. — Version 3.7.12 Bug fix: Missing space in two SQL queries broke saving events. Sigh. 3.7.12

20 disclosed vulnerabilities on record for this plugin, all fixed in the current version. Sites on older versions stay exposed until they update.

1. High · 7.5 My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters ↗
   2026-07-07 CVE-2026-6854 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.7.8 Patched in 3.7.9
2. Medium · 5.3 My Calendar <= 3.7.14 - Insecure Direct Object Reference to Unauthenticated Sensitive Information Disclosure via 'vcal' Parameter ↗
   2026-07-01 CVE-2026-11896 Authorization Bypass Through User-Controlled Key Affects <= 3.7.14 Patched in 3.7.15
3. Medium · 4.3 My Calendar <= 3.7.9 - Authenticated (Custom+) Missing Authorization to Unauthorized Event Publication via 'event_approved' Parameter ↗
   2026-05-13 CVE-2026-7525 Missing Authorization Affects <= 3.7.9 Patched in 3.7.10
4. Medium · 5.3 My Calendar < 3.7.7 - Unauthenticated Denial of Service ↗
   2026-04-16 CVE-2026-40308 Authorization Bypass Through User-Controlled Key Affects < 3.7.7 Patched in 3.7.7
5. Medium · 6.4 My Calendar – Accessible Event Manager <= 3.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes ↗
   2026-03-03 CVE-2026-2355 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.7.3 Patched in 3.7.4
6. Medium · 4.3 My Calendar <= 3.6.16 - Missing Authorization ↗
   2025-12-15 CVE-2025-67592 Missing Authorization Affects <= 3.6.16 Patched in 3.6.17
7. Medium · 4.4 My Calendar <= 3.4.23 - Authenticated (Admin+) Stored Cross-Site Scripting via Events ↗
   2024-02-11 CVE-2024-1274 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.23 Patched in 3.4.24
8. Medium · 6.4 My Calendar <= 3.4.23 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode ↗
   2024-02-11 CVE-2024-25916 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.4.23 Patched in 3.4.24
9. Critical · 9.8 My Calendar <= 3.4.21 - Unauthenticated SQL Injection ↗
   2023-11-26 CVE-2023-6360 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Affects <= 3.4.21 Patched in 3.4.22
10. High · 8.8 My Calendar <= 3.4.3 - Cross-Site Request Forgery ↗
    2023-01-20 CVE-2023-23813 Cross-Site Request Forgery (CSRF) Affects <= 3.4.3 Patched in 3.4.4
11. High · 7.1 My Calendar <= 3.3.24.1 - Cross-Site Request Forgery ↗
    2023-01-03 CVE-2022-47427 Cross-Site Request Forgery (CSRF) Affects <= 3.3.24.1 Patched in 3.3.25
12. Medium · 4.7 My Calendar <= 3.3.16 - Open Redirect ↗
    2022-08-02 CVE-2022-36371 URL Redirection to Untrusted Site ('Open Redirect') Affects <= 3.3.16 Patched in 3.3.17
13. Medium · 5.5 My Calendar <= 3.3.16 - Administrator+ Stored Cross-Site Scripting ↗
    2022-07-18 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.3.16 Patched in 3.3.17
14. Medium · 5.4 My Calendar <= 3.2.17 - Subscriber+ Reflected Cross-Site Scripting ↗
    2021-11-01 CVE-2021-24927 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.2.17 Patched in 3.2.18
15. Medium · 6.1 My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting ↗
    2019-04-30 CVE-2019-15713 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects <= 3.1.9 Patched in 3.1.10
16. Medium · 6.4 My Calendar <= 2.5.16 - Authenticated Stored Cross-Site Scripting ↗
    2018-04-04 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.5.17 Patched in 2.5.17
17. Medium · 6.1 My Calendar < 2.3.30 - Reflected Cross-Site Scripting ↗
    2015-05-15 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.3.30 Patched in 2.3.30
18. Critical · 9.8 My Calendar <= 2.3.29 - Path Traversal to Remote Code Execution ↗
    2015-05-15 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Affects <= 2.3.29 Patched in 2.3.30
19. Medium · 6.1 My Calendar < 2.3.10 - Reflected Cross-Site Scripting ↗
    2015-04-20 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 2.3.10 Patched in 2.3.10
20. Medium · 6.1 My Calendar < 1.10.5 - Cross-Site Scripting ↗
    2012-01-18 CVE-2012-6527 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Affects < 1.10.5 Patched in 1.10.5

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

Translated into 66 languages, 4 at 90% or more

Plus 42 more locales with partial translations.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2023-06-24 30K+ → 20K+ down after 4 days in tier
2. 2023-06-20 20K+ → 30K+ up after 3 days in tier
3. 2023-06-17 30K+ → 20K+ down after 1 days in tier
4. 2023-06-16 20K+ → 30K+ up after 1 days in tier
5. 2023-06-15 30K+ → 20K+ down after 1 days in tier
6. 2023-06-14 20K+ → 30K+ up after 3 days in tier
7. 2023-06-11 30K+ → 20K+ down after 108 days in tier
8. 2023-02-23 20K+ → 30K+ up after 3 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

• Event Prime – Events Calendar, Bookings and Tickets 7K+ installs · 4.4★ · 2 shared tags A
• Events Search & Filter Bar for The Events Calendar 3K+ installs · 4.5★ · 2 shared tags A
• Quick Event Manager 1K+ installs · 4.7★ · 2 shared tags B
• Simple Event Planner 1K+ installs · 4.2★ · 2 shared tags B
• CP Multi View Events Calendar 900+ installs · 4.2★ · 2 shared tags A
• Event Monster – Event Manager, Event Booking, Event Ticket & Registration 600+ installs · 4.5★ · 2 shared tags A

Embed this report card

Drop a live Pulse card for My Calendar – Accessible Event Manager into a readme, a review or a deck. It updates itself.

My Calendar – Accessible Event Manager: 20K+ active installs, 4.7★ (158 reviews). Plugin Pulse (WP Mayor), as of 2026-08-25. https://plugins.wpmayor.com/plugin/my-calendar