CVE-2026-97642 Wp Parsidate <= 6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'theme' Block Attribute

The Wp Parsidate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the calendar Gutenberg block's 'theme' attribute in versions up to, and including, 6.4. This is due to insufficient input sanitization and output escaping on the block attribute value which is concatenated...

CVE-2026-97642

The Wp Parsidate plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in versions up to and including 6.4 . The vulnerability exists in the calendar Gutenberg block due to insufficient input sanitization and output escaping of the 'theme' attribute . Specifically, the printCale...

EUVD-2026-118176

The Wp Parsidate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the calendar Gutenberg block's 'theme' attribute in versions up to, and including, 6.4. This is due to insufficient input sanitization and output escaping on the block attribute value which is concatenated...