The Information Security Office has identified a cross-site scripting vulnerability originating from this plugin. A fix from the developer has not be identified. As a result, UBS stewards will be removing The Events Calendar plugin from the service on April 27th. Service stewards have reached out to users of this plugin individually.
UBS stewards are working to find a suitable replacement and migration path. Please stay in touch for further details as they become available.