Read the docs

Brian Hogg

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Brian Hogg records in CISA KEV

No Brian Hogg vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-20173 CVE-2026-24988 · GHSA-578r-63mx-xx77

WordPress The Events Calendar Shortcode & Block plugin <= 3.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Brian Hogg The Events Calendar Shortcode & Block the-events-calendar-shortcode allows Stored XSS.This issue affects Th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00154 Published 2026-02-03 No fix listed CWE-79
TI-2026-01587 CVE-2026-1922 · GHSA-94fq-9gxh-9g92

Cross-site scripting in Brian Hogg The Events Calendar Shortcode & Block

Priority LOW 28

The The Events Calendar Shortcode & Block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ecs-list-events` shortcode `message` attribute in all versions up to, and including, 3.1.2 due…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00272 Published 2026-02-10 No fix listed CWE-79
Open these records in search →