Vulnerabilities

TI-2026-47311 CVE-2026-66640 · GHSA-cr8x-xwpq-5p62

WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

LOW 28

Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00224 Published 2026-08-18 No fix listed CWE-79

TI-2026-41537 CVE-2026-57713 · GHSA-652w-mp65-jg96

WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability

MEDIUM 40

Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00461 Published 2026-07-13 No fix listed CWE-502

TI-2026-17933 CVE-2026-22351 · GHSA-6v87-78cw-pw29

WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <=…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00333 Published 2026-02-20 No fix listed CWE-862

TI-2026-19764 CVE-2026-24523 · GHSA-mp3w-p427-6237

WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability

LOW 30

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar:…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00328 Published 2026-01-23 No fix listed CWE-497

TI-2025-01068 CVE-2025-1249 · GHSA-c57f-j5xw-8g97

WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through <= 6.6…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00347 Published 2025-02-26 No fix listed CWE-862

TI-2025-16165 CVE-2025-22260 · GHSA-c6q5-rrw7-p494

WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Marcus (aka @msykes) Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through <= 3.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00364 Published 2025-02-03 No fix listed CWE-862

TI-2025-16166 CVE-2025-22261 · GHSA-5gq4-27hv-48vf

WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Stored XSS.This issue affects WP FullCalendar: from n/a th…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00307 Published 2025-01-07 No fix listed CWE-79

TI-2023-27263 CVE-2023-49859 · GHSA-gwxf-w6rq-6q8h

WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login With Ajax: from n/a through <=…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00426 Published 2024-12-09 No fix listed CWE-862

Vulnerabilities

Filters