| CVE-2026-123464 |
WordPress The Events Calendar plugin <= 6.18.3 - Cross Site Scripting (XSS) vulnerability
|
6.5
Medium
|
Nov 7, 2026 |
| CVE-2026-123469 |
WordPress The Events Calendar plugin <= 6.18.3 - Content Injection vulnerability
|
5.3
Medium
|
Nov 7, 2026 |
| CVE-2026-119367 |
Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows…
|
5.4
Medium
|
Oct 30, 2026 |
| CVE-2026-119369 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…
|
6.5
Medium
|
Oct 30, 2026 |
| CVE-2026-119368 |
Missing Authorization vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows…
|
5.3
Medium
|
Oct 30, 2026 |
| CVE-2026-119370 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…
|
6.5
Medium
|
Oct 30, 2026 |
| CVE-2026-110903 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web /…
|
6.5
Medium
|
Oct 16, 2026 |
| CVE-2026-95606 |
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection
|
9.8
Critical
|
Oct 7, 2026 |
| CVE-2026-49772 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web /…
|
9.3
Critical
|
Jun 16, 2026 |