Marcus (Aka @Msykes)

8 CVEs across 4 Marcus (Aka @Msykes) products. Browse Marcus (Aka @Msykes) vulnerabilities, severities, and proof-of-concept exploits.

Marcus (Aka @Msykes) products with known CVEs

ProductCVEs
Wp Fullcalendar3
Events Manager2
Login With Ajax2
Meta Tag Manager1
Marcus (Aka @Msykes) CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-66640Medium6.52026-08-18Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.
CVE-2026-57713High8.82026-07-13Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager…
CVE-2026-22351High7.52026-02-20Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Le…
CVE-2026-24523Medium5.32026-01-23Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retriev…
CVE-2025-1249Medium5.32025-02-26Missing Authorization vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Leve…
CVE-2025-22260Medium4.32025-02-03Missing Authorization vulnerability in Marcus (aka @msykes) Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through <= 3.1.
CVE-2025-22261Medium6.52025-01-07Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allo…
CVE-2023-49859Medium4.32024-12-09Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Le…