CVE Intelligence

Vulnerabilidades do Marcus (aka @msykes) WP FullCalendar

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Marcus (aka @msykes) WP FullCalendar: 2 registro(s), com versões afetadas e correções.

CVE-2026-22351 Alta · 7.5 CWE-862 20/02/2026
WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <= 1.6.
CVE-2026-24523 Média · 5.3 CWE-497 23/01/2026
WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through <= 1.6.