https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:00:47.893171+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-382129 EUVD-2026-382129 2026-10-02T11:00:47.895285+00:00 EUVD-2026-382129 https://cve.radiocsirt.org/vuln/fkie_cve-2026-84740 fkie_cve-2026-84740 2026-10-02T11:00:47.895316+00:00

The Events Calendar WordPress plugin before 6.17.5.1 does not validate or sanitise data submitted to an unauthenticated AJAX action before merging it into its rendering context, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.

 https://cve.radiocsirt.org/vuln/ghsa-4c37-j68q-cmxj GHSA-4c37-j68q-cmxj 2026-10-02T11:00:47.895346+00:00

The Events Calendar WordPress plugin before 6.17.5.1 does not validate or sanitise data submitted to an unauthenticated AJAX action before merging it into its rendering context, allowing unauthenticated users to execute arbitrary shortcodes registered on the site.