agentprime: stellarwp-the-events-calendarEvery new CVE for stellarwp-the-events-calendar.https://agentprime.io/CVE-2026-78159: The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocationhttps://agentprime.io/advisories/CVE-2026-78159/https://agentprime.io/advisories/CVE-2026-78159/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 07:39:15 GMTCVEcriticalCVE-2026-78006: The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Executionhttps://agentprime.io/advisories/CVE-2026-78006/https://agentprime.io/advisories/CVE-2026-78006/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 12 Sep 2026 07:39:15 GMTCVEcriticalCVE-2026-3585: The Events Calendar <= 6.15.17 - Authenticated (Author+) Arbitrary File Read via ajax_create_importhttps://agentprime.io/advisories/CVE-2026-3585/https://agentprime.io/advisories/CVE-2026-3585/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Mar 2026 03:33:51 GMTCVECVE-2026-2694: The Events Calendar <= 6.15.16 - Improper Authorization to Authenticated (Contributor+) Event/Organizer/Venue Update/Trash via REST APIhttps://agentprime.io/advisories/CVE-2026-2694/https://agentprime.io/advisories/CVE-2026-2694/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Feb 2026 21:25:02 GMTCVECVE-2025-15043: The Events Calendar <= 6.15.13 - Missing Authorization to Authenticated (Subscriber+) Data Migration Controlhttps://agentprime.io/advisories/CVE-2025-15043/https://agentprime.io/advisories/CVE-2025-15043/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 20 Jan 2026 14:26:32 GMTCVECVE-2025-69352: WordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerabilityhttps://agentprime.io/advisories/CVE-2025-69352/https://agentprime.io/advisories/CVE-2025-69352/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 06 Jan 2026 16:36:40 GMTCVECVE-2025-12192: The Events Calendar <= 6.15.9 - Sysinfo Key Incorrect Comparison to Unauthenticated Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2025-12192/https://agentprime.io/advisories/CVE-2025-12192/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 09:27:40 GMTCVECVE-2025-12197: The Events Calendar 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via shttps://agentprime.io/advisories/CVE-2025-12197/https://agentprime.io/advisories/CVE-2025-12197/CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.18 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 04:36:58 GMTCVEcriticalCVE-2025-12175: The Events Calendar <= 6.15.9 - Missing Authorization to Authenticated (Subscriber+) Draft Event Title/QR Code Exposurehttps://agentprime.io/advisories/CVE-2025-12175/https://agentprime.io/advisories/CVE-2025-12175/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 31 Oct 2025 08:25:54 GMTCVECVE-2025-9808: The Events Calendar <= 6.15.2 - Missing Authorization to Unauthenticated Password-Protected Information Disclosurehttps://agentprime.io/advisories/CVE-2025-9808/https://agentprime.io/advisories/CVE-2025-9808/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Sep 2025 05:25:26 GMTCVECVE-2025-9807: The Events Calendar <= 6.15.1 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2025-9807/https://agentprime.io/advisories/CVE-2025-9807/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 12 Sep 2025 01:46:00 GMTCVECVE-2025-5144: The Events Calendar <= 6.13.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2025-5144/https://agentprime.io/advisories/CVE-2025-5144/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 11 Jun 2025 12:22:52 GMTCVECVE-2025-48246: WordPress The Events Calendar plugin <= 6.11.2.1 - Broken Access Control Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-48246/https://agentprime.io/advisories/CVE-2025-48246/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 19 May 2025 14:44:54 GMTCVECVE-2025-24537: WordPress The Events Calendar plugin <= 6.7.0 - Cross Site Request Forgery (CSRF) vulnerabilityhttps://agentprime.io/advisories/CVE-2025-24537/https://agentprime.io/advisories/CVE-2025-24537/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 27 Jan 2025 14:22:14 GMTCVECVE-2024-12118: The Events Calendar <= 6.9.0 - Authenticated (Contributor+) Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-12118/https://agentprime.io/advisories/CVE-2024-12118/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jan 2025 11:13:29 GMTCVECVE-2024-37518: WordPress The Events Calendar plugin <= 6.5.1.4 - Cross Site Request Forgery (CSRF) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-37518/https://agentprime.io/advisories/CVE-2024-37518/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 02 Jan 2025 12:01:00 GMTCVECVE-2024-6931: The Events Calendar <= 6.6.3 - Unauthenticated Stored Cross-Site Scriptinghttps://agentprime.io/advisories/CVE-2024-6931/https://agentprime.io/advisories/CVE-2024-6931/CVSS 7.2 (High). Critical: CVSS score 7.2 (7.0 or more) and EPSS 0.17 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Sep 2024 08:46:24 GMTCVEcriticalCVE-2024-8275: The Events Calendar <= 6.6.4 - Unauthenticated SQL Injectionhttps://agentprime.io/advisories/CVE-2024-8275/https://agentprime.io/advisories/CVE-2024-8275/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 0.50 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.Wed, 25 Sep 2024 04:30:28 GMTCVEcriticalCVE-2024-31433: WordPress The Events Calendar plugin <= 6.3.0 - Cross Site Request Forgery (CSRF) vulnerabilityhttps://agentprime.io/advisories/CVE-2024-31433/https://agentprime.io/advisories/CVE-2024-31433/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Apr 2024 09:29:42 GMTCVECVE-2023-6557: The Events Calendar <= 6.2.8.2 - Unauthenticated Sensitive Information Exposurehttps://agentprime.io/advisories/CVE-2023-6557/https://agentprime.io/advisories/CVE-2023-6557/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 05 Feb 2024 21:22:06 GMTCVE