Nexcess The Events Calendar

• CVE-2026-97285 Medium 5.4 WordPress The Events Calendar plugin <= 6.17.5 - Broken Access Control vulnerability 0.2%
• CVE-2026-78265 Critical 9.8 WordPress The Events Calendar plugin <= 6.17.2 - PHP Object Injection vulnerability 0.6%