Read the docs

Marcus (aka @msykes)

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Marcus (aka @msykes) records in CISA KEV

No Marcus (aka @msykes) vulnerabilities are listed in CISA KEV.

Records

8 records

TI-2026-41537 CVE-2026-57713 · GHSA-652w-mp65-jg96

WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability

Priority MEDIUM 40

Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00461 Published 2026-07-13 No fix listed CWE-502
TI-2026-17933 CVE-2026-22351 · GHSA-6v87-78cw-pw29

WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability

Priority LOW 39

Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <=…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00333 Published 2026-02-20 No fix listed CWE-862
TI-2026-19764 CVE-2026-24523 · GHSA-mp3w-p427-6237

WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability

Priority LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar:…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00328 Published 2026-01-23 No fix listed CWE-497
TI-2025-01068 CVE-2025-1249 · GHSA-c57f-j5xw-8g97

WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through <= 6.6…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00347 Published 2025-02-26 No fix listed CWE-862
TI-2025-16166 CVE-2025-22261 · GHSA-5gq4-27hv-48vf

WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Stored XSS.This issue affects WP FullCalendar: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00307 Published 2025-01-07 No fix listed CWE-79
TI-2023-27263 CVE-2023-49859 · GHSA-gwxf-w6rq-6q8h

WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login With Ajax: from n/a through <=…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00426 Published 2024-12-09 No fix listed CWE-862
Open these records in search →