Skip to content
Threat Feed
Subscribe

Vendor

The Events Calendar

1 brief RSS
critical advisory

Remote Code Execution in The Events Calendar WordPress Plugin

An unauthenticated remote code execution vulnerability (CVE-2026-78006) exists in The Events Calendar plugin for WordPress due to insecure deserialization in the is_safe_widget_instance function.

The Events Calendar
2t 1c