CVE Intelligence

Nexcess The Events Calendar vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Nexcess The Events Calendar: 2 record(s), with affected versions and fixes.

CVE-2026-97285 Medium · 5.4 CWE-862 Sep 30, 2026
WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability
Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.
CVE-2026-78265 Critical · 9.8 CWE-502 Aug 24, 2026
WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.