Login Request a demo
TE
Product
The Events Calendar
by Liquid Web / StellarWP · last CVE Oct 30, 2026
6
CVEs
0
On KEV
9.8
Max CVSS
5
New 30D
Vulnerabilities6In the news0Timeline
Severity mix
Critical 2High 0Medium 4Low 0
Severity
All severities6Critical2High0Medium4Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add The Events Calendar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-119370
New
6.5–Oct 30
WordPress The Events Calendar plugin <= 6.18.2 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.18.2
CVE-2026-110903
6.5
0%
Oct 16
WordPress The Events Calendar plugin <= 6.18.1 - Cross Site Scripting (XSS) vulnerability
Affected: through 6.18.1
CVE-2026-119367
New
5.4–Oct 30
WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
Affected: through 6.18.2
CVE-2026-119368
New
5.3–Oct 30
WordPress The Events Calendar plugin <= 6.18.2 - Broken Access Control vulnerability
Affected: through 6.18.2
Showing 4