Nexcess The Events Calendar
2 CVEs affecting Nexcess The Events Calendar. Latest disclosed: 2026-09-30. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-78265 | Critical | 9.8 | 2026-08-24 | Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions. |
CVE-2026-97285 | Medium | 5.4 | 2026-09-30 | Contributor Broken Access Control in The Events Calendar <= 6.17.5 versions. |