Known vulnerabilities in Nexcess The Events Calendar
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-97285 | Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions | 5.4 Medium | Sep 30, 2026 |
| CVE-2026-78265 | Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions | 9.8 Critical | Aug 24, 2026 |