Liquid Web / Stellarwp The Events Calendar vulnerabilities

3 vulnerabilities

Known vulnerabilities in Liquid Web / Stellarwp The Events Calendar, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2026-110903liquid web / stellarwpthe events calendar
EPSS score
0.13%
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Liquid Web / StellarWP The Events Calendar the-events-calendar allows Stored XSS.This issue affects The Events Calendar: from n/a through 6.18.1.9.8CVE-2026-95606liquid web / stellarwpthe events calendar+1
EPSS score
0.33%
Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection. This issue affects The Events Calendar: from n/a through 6.17.4.9.3CVE-2026-49772liquid web / stellarwpthe events calendar+1
EPSS score
0.45%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection. This issue affects The Events Calendar: from 6.15.12 through 6.16.2.