Marcus (aka @msykes) WP FullCalendar

• CVE-2026-22351 High 7.5 WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability 0.3%
• CVE-2026-24523 Medium 5.3 WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability 0.3%
• CVE-2025-22261 Medium 6.5 WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability 0.3%