TE
Product
The Events Calendar
by stellarwp · last CVE Sep 12, 2026
25
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 4Medium 17Low 0
Watch

Add The Events Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-78159
9.8
1%
Sep 12
The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation
Affected: through 6.17.3
CVE-2026-78006
9.8
1%
Sep 12
The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution
Affected: through 6.17.4
CVE-2024-8275
9.8
50%
Sep 25
The Events Calendar <= 6.6.4 - Unauthenticated SQL Injection
Affected: through 6.6.4
CVE-2024-4180
9.1
2%
Jun 4
The Events Calendar < 6.4.0.1 - Reflected XSS
Affected: before 6.4.0.1
Showing 4