WordPress Plugin Vulnerabilities
The Events Calendar < 6.15.13 - Missing Authorization
Description
The plugin is vulnerable to unauthorized access due to a missing capability check on a function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform an unauthorized action.
Affects Plugins
Fixed in 6.15.13 References
Classification
Type
NO AUTHORISATION
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Phat RiO - BlueRock
Verified
No
WPVDB ID
Timeline
Publicly Published
2026-01-09 (about 4 months ago)
Added
2026-01-14 (about 3 months ago)
Last Updated
2026-01-14 (about 3 months ago)
WPScan 