CVE-2026-1310

CVE-2026-1310 affects the WordPress plugin Simple calendar for Elementor. The vulnerability is due to missing capability checks in the miga_ajax_editor_cal_delete handler (hooked to the miga_editor_cal_delete AJAX action), granting unauthenticated access to delete calendar entries. It impacts all...