Unknown The Events Calendar

• CVE-2026-84740 Medium 6.5 The Events Calendar 6.12.0 - 6.17.5 - Unauthenticated Arbitrary Shortcode Execution via 'view_data' Parameter 0.2%
• CVE-2026-84743 Low 3.8 The Events Calendar 6.15.16.1 - 6.17.4.1 - Contributor+ Event/Venue/Organizer Update, Trash and Ownership Takeover via by-slug REST Routes 0.3%
• CVE-2026-84742 Low 2.7 The Events Calendar 6.15.0 - 6.17.4.1 - Contributor+ Content Publication via TEC V1 REST API 0.3%
• CVE-2026-84741 Medium 5.3 The Events Calendar 4.5 - 6.17.4.1 - Unauthenticated Non-Public Venue and Organizer Disclosure via REST API 0.3%
• CVE-2026-84745 Low 2.7 The Events Calendar < 6.17.3.1 - Contributor+ Non-Public Event, Venue and Organizer Content Disclosure via REST API 0.3%
• CVE-2026-13390 Medium 5.3 The Events Calendar < 6.16.5.1 - Unauthenticated Event Aggregator Import Status Manipulation 0.3%
• CVE-2024-8493 Medium 4.8 The Events Calendar < 6.6.4 - Admin+ Stored XSS 0.4%
• CVE-2024-5333 Medium 5.3 The Events Calendar < 6.8.2.1 - Unauthenticated Password Protected Event Disclosure 1.1%
• CVE-2024-1295 Medium 6.5 The Events Calendar (Free < 6.4.0.1, Pro < 6.4.0.1) - Contributor+ Arbitrary Events Access 0.5%
• CVE-2024-4180 Critical 9.1 The Events Calendar < 6.4.0.1 - Reflected XSS 2.1%
• CVE-2023-6203 Unrated The Events Calendar < 6.2.8.1 - Unauthenticated Arbitrary Password Protected Post Read 0.8%