What’s Vulnerable › Products

Liquid Web / StellarWP The Events Calendar vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your Liquid Web / StellarWP The Events Calendar version is affected

Latest Liquid Web / StellarWP The Events Calendar vulnerabilities

• CVE-2026-119367 — WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability (CVSS 5.4)
• CVE-2026-119369 — WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-119368 — WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2026-119370 — WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-110903 — WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5)
• CVE-2026-95606 — WordPress The Events Calendar plugin <= 6.17.4 - PHP Object Injection vulnerability (CVSS 9.8)
• CVE-2026-49772 — WordPress The Events Calendar plugin 6.15.12-6.16.2 - SQL Injection vulnerability (CVSS 9.3)