CVE-2026-78159

abraxaslabs.tech · github.com/abraxas · @abraxasnull · [email protected] · CVE-2026-78159 Write-up: https://abraxaslabs.tech/research/CVE-2026-78159 CVE-2026-78159 The Events Calendar 6.17.3 - stellarwp I am @abraxasnull. Loopback lab. The client is CVE-2026-78159-Abraxas-Labs.py. parsearray...

Exploit for CVE-2026-78159

abraxaslabs.tech · github.com/abraxas ·&...

VulnCheck KEV: CVE-2026-78159

The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parsearray function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the issafewidgetinstance objec...

CVE-2026-78159

The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parsearray function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the issafewidgetinstance objec...

EUVD-2026-76833

The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parsearray function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the issafewidgetinstance objec...

CVE-2026-78159: Improper Control of Generation of Code

The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parsearray function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the issafewidgetinstance objec...

CVE-2020-18392

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-18392

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

Stack overflow

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-18392

Cesanta MJS 1.20.1 contains a stack overflow in the parse_array function, enabling remote DoS via a crafted file. Affected: Cesanta MJS 1.20.1. Root cause: stack overflow in parse_array; impact is Denial of Service. Some sources suggest a workaround (disable the parse array function) until a fix;...

CVE-2020-18392

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-18392: Uncontrolled Recursion

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...