Log in Start free

Marcus (aka @msykes)

Products

ProductCVEsExploitedLatest
WP FullCalendar3–Feb 20, 2026
Events Manager2–Jul 13, 2026
Login With Ajax2–Aug 18, 2026
Meta Tag Manager1–Feb 3, 2025

Exploited and recent CVEs

  • CVE-2026-66640 Medium 6.5 WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability 0.2%
  • CVE-2026-57713 High 8.8 WordPress Events Manager plugin <= 7.3.6 - PHP Object Injection vulnerability 0.5%
  • CVE-2026-22351 High 7.5 WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability 0.3%
  • CVE-2026-24523 Medium 5.3 WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability 0.3%
  • CVE-2025-1249 Medium 5.3 WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability 0.3%
  • CVE-2025-22260 Medium 4.3 WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability 0.4%
  • CVE-2025-22261 Medium 6.5 WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2023-49859 Medium 4.3 WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability 0.4%