Nexcess The Events Calendar vulnerabilities
2 known vulnerabilities affecting nexcess/the_events_calendar.
Total CVEs
2
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2026-78265P2CRITICALCVSS 9.8≥ n/a, ≤ 6.17.22026-08-24
CVE-2026-78265 [CRITICAL] CWE-502 CVE-2026-78265: Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.
nvd
CVE-2026-97285P4MEDIUMCVSS 5.4≥ n/a, ≤ 6.17.52026-09-30
CVE-2026-97285 [MEDIUM] CWE-862 CVE-2026-97285: Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.
Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions.
nvd