Product by Liquid Web / Stellarwp

    The Events Calendar

    7 known vulnerabilities in The Events Calendar (Liquid Web / Stellarwp), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in The Events Calendar (Liquid Web / Stellarwp)
    CriticalCVE-2026-49772

    WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability

    		9.3
    CriticalCVE-2026-95606

    WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability

    		9.8
    MediumCVE-2026-119369

    WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-119370

    WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-110903

    WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability

    		6.5
    MediumCVE-2026-119368

    WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

    		5.3
    MediumCVE-2026-119367

    WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability

    		5.4

    All products by Liquid Web / Stellarwp