Unknown The Events Calendar
5 known vulnerabilities in Unknown The Events Calendar, with patch priority, exploit likelihood and the news covering them.
Latest vulnerabilities
- CVE-2026-84740 CVSS 6.5 medium The Events Calendar WordPress plugin before 6.17.5.1 does not validate or sanitise data submitted to an unauthenticated AJAX action before…
- CVE-2026-84743 CVSS 3.8 low The Events Calendar WordPress plugin before 6.17.5 does not perform a per-object capability check on one family of its REST write routes…
- CVE-2026-84742 CVSS 2.7 low The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating…
- CVE-2026-84741 CVSS 5.3 medium The Events Calendar WordPress plugin before 6.17.5 does not check the post status of linked records before embedding their stored details…
- CVE-2026-84745 CVSS 2.7 low The Events Calendar WordPress plugin before 6.17.3.1 does not restrict non-public content to the users entitled to read it on its public…