Vulnerabilidades de Marcus (aka @msykes)
CVEs publicadas que afetam produtos de Marcus (aka @msykes): 4 registro(s), com severidade, exploração e correções.
CVE-2026-66640
Média · 6.5
CWE-79 18/08/2026
WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.
CVE-2026-57713
Alta · 8.8
CWE-502 13/07/2026
WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability
Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6.
CVE-2026-22351
Alta · 7.5
CWE-862 20/02/2026
WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability
Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <= 1.6.
CVE-2026-24523
Média · 5.3
CWE-497 23/01/2026
WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability
Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through <= 1.6.