Login Request a demo
TE
Product
The Events Calendar
by · last CVE Oct 2, 2026
11
CVEs
0
On KEV
9.1
Max CVSS
1
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 1Medium 6Low 3
Severity
All severities11Critical1High1Medium6Low3
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add The Events Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-84740
6.5
0%
Oct 2
The Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode Execution via 'view_data' Parameter
Affected: 6.12.0 before 6.17.5.1
CVE-2024-1295
6.5
0%
Jun 14
The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access
Affected: before 6.4.0.1
CVE-2026-84741
5.3
0%
Sep 23
The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST API
Affected: 4.5 before 6.17.5
CVE-2026-13390
5.3
0%
Jul 27
The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation
Affected: before 6.16.5.1
CVE-2024-5333
5.3
1%
Dec 16
The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure
Affected: before 6.8.2.1
CVE-2024-8493
4.8
0%
May 15
The Events Calendar < 6.6.4 - Admin+ Stored XSS
Affected: before 6.6.4
Showing 6