https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T09:49:37.770218+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2026-13238 cnvd-2026-13238 2026-10-06T09:49:37.818270+00:00 cnvd-2026-13238 https://cve.radiocsirt.org/vuln/euvd-2026-289241 EUVD-2026-289241 2026-10-06T09:49:37.818310+00:00 EUVD-2026-289241 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12192 fkie_cve-2025-12192 2026-10-06T09:49:37.818324+00:00

The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain the full system report whenever "Yes, automatically share my system information with The Events Calendar support team" setting is enabled.

 https://cve.radiocsirt.org/vuln/ghsa-7r77-r49w-qf55 GHSA-7r77-r49w-qf55 2026-10-06T09:49:37.818355+00:00

The Events Calendar plugin for WordPress is vulnerable to information disclosure in versions up to, and including, 6.15.9. The sysinfo REST endpoint compares the provided key to the stored opt-in key using a loose comparison, allowing unauthenticated attackers to send a boolean value and obtain the full system report whenever "Yes, automatically share my system information with The Events Calendar support team" setting is enabled.