https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:22:50.179969+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-289210 EUVD-2026-289210 2026-10-06T17:22:50.182763+00:00 EUVD-2026-289210 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1310 fkie_cve-2026-1310 2026-10-06T17:22:50.182794+00:00

The Simple calendar for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.6.6. This is due to missing capability checks on the `miga_ajax_editor_cal_delete` function that is hooked to the `miga_editor_cal_delete` AJAX action with both authenticated and unauthenticated access enabled. This makes it possible for unauthenticated attackers to delete arbitrary calendar entries by sending a request with a valid nonce and the calendar entry ID.

 https://cve.radiocsirt.org/vuln/ghsa-gvwp-rvc7-xjm8 GHSA-gvwp-rvc7-xjm8 2026-10-06T17:22:50.182826+00:00

The Simple calendar for Elementor plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.6.6. This is due to missing capability checks on the `miga_ajax_editor_cal_delete` function that is hooked to the `miga_editor_cal_delete` AJAX action with both authenticated and unauthenticated access enabled. This makes it possible for unauthenticated attackers to delete arbitrary calendar entries by sending a request with a valid nonce and the calendar entry ID.