Lucene search
K

46 matches found

RedhatCVE
RedhatCVE
added 2026/02/21 7:29 p.m.1 views

CVE-2026-22351

Missing Authorization vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through = 1.6...

7.5CVSS5.5AI score0.00047EPSS
Exploits0References1
NVD
NVD
added 2026/02/20 4:22 p.m.3 views

CVE-2026-22351

Missing Authorization vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through = 1.6...

7.5CVSS0.00047EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/02/20 3:47 p.m.23 views

CVE-2026-22351 WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through = 1.6...

7.5CVSS0.00047EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/20 3:47 p.m.0 views

CVE-2026-22351

Missing Authorization vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through = 1.6...

5.4AI score0.00047EPSS
Exploits0References2
CVE
CVE
added 2026/02/20 3:47 p.m.4 views

CVE-2026-22351

CVE-2026-22351 pertains to WP FullCalendar (WordPress plugin) versions through 1.6, with a Missing Authorization vulnerability that permits exploitation due to incorrectly configured access control. Red Hat/RedHat and PatchStack mirrors confirm the underlying issue as Broken Access Control affect...

7.5CVSS5.5AI score0.00047EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/02/20 3:47 p.m.2 views

CVE-2026-22351 WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through = 1.6...

7.5CVSS5.3AI score0.00047EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.3 views

WordPress plugin WP FullCalendar 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. There is...

7.5CVSS5.8AI score0.00047EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.3 views

PT-2026-21199

Name of the Vulnerable Software and Affected Versions WP FullCalendar versions through 1.6 Description The WP FullCalendar software contains a missing authorization flaw. This allows exploitation of incorrectly configured access control security levels. No information is available regarding the...

5.4AI score0.00047EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/02/11 11:42 a.m.2 views

WordPress WP FullCalendar plugin <= 1.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Doan Dinh Van in WordPress Plugin WP FullCalendar versions = 1.6...

6.5CVSS5.4AI score0.00047EPSS
Exploits0Affected Software1
CNVD
CNVD
added 2026/01/30 12:0 a.m.2 views

WordPress Plugin WP FullCalendar Information Disclosure Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin WP FullCalendar, which...

7.5CVSS5.5AI score0.00015EPSS
Exploits0References1
Patchstack
Patchstack
added 2026/01/26 2:3 p.m.3 views

WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability

Sensitive Data Exposure vulnerability discovered by Nabil Irawan in WordPress Plugin WP FullCalendar versions = 1.6...

7.5CVSS5.9AI score0.00015EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/24 3:18 p.m.2 views

CVE-2026-24523

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through = 1.6...

5.3CVSS5.4AI score0.00015EPSS
Exploits0References1
NVD
NVD
added 2026/01/23 3:16 p.m.2 views

CVE-2026-24523

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through = 1.6...

5.3CVSS0.00015EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/23 2:28 p.m.1 views

CVE-2026-24523

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through = 1.6...

7.5CVSS5.9AI score0.00015EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/01/23 2:28 p.m.1 views

CVE-2026-24523 WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through = 1.6...

5.3CVSS5.9AI score0.00015EPSS
Exploits0References1
CVE
CVE
added 2026/01/23 2:28 p.m.9 views

CVE-2026-24523

The CVE-2026-24523 entry concerns the WordPress WP FullCalendar plugin (versions up to and including 1.6) where embedded sensitive data is exposed to an unauthorized control sphere. The issue originates from information disclosure that enables retrieval of embedded sensitive data, affecting WP Fu...

5.3CVSS5.4AI score0.00015EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/23 2:28 p.m.29 views

CVE-2026-24523 WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus aka @msykes WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through = 1.6...

5.3CVSS0.00015EPSS
Exploits0References1
CNNVD
CNNVD
added 2026/01/23 12:0 a.m.1 views

WordPress plugin WP FullCalendar 安全漏洞

WordPress is a blogging platform developed using the PHP language. The platform has the ability to set up a personal blog site on a PHP and MySQL based server.WordPress plugin is an application plugin. An information disclosure vulnerability exists in the WordPress plugin WP FullCalendar, which...

5.3CVSS5.7AI score0.00015EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/23 12:0 a.m.1 views

PT-2026-4373

Name of the Vulnerable Software and Affected Versions WP FullCalendar versions through 1.6 Description A flaw exists in WP FullCalendar that allows the retrieval of embedded sensitive data. This issue potentially exposes sensitive system information to unauthorized access. Recommendations Update ...

7.5CVSS5.2AI score0.00015EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-2680

Malicious code in bioql PyPI...

6.5CVSS8.7AI score0.00137EPSS
Exploits0References1
Rows per page
Query Builder