Cpe:2.3:a:theeventscalendar:the_events_calendar:*:*:*:*:*:wordpress:*:*

An unauthenticated remote code execution vulnerability (CVE-2026-78006) exists in The Events Calendar plugin for WordPress due to insecure deserialization in the is_safe_widget_instance function.