CVE-2026-84742
The Events Calendar 6.15.0 - 6.17.4.1 - Contributor+ Content Publication via TEC V1 REST API
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST API, allowing users with a role that cannot normally publish, such as contributor, to publish content directly and bypass editorial review.
| Vendor | unknown |
| Product | the events calendar |
| Published | Sep 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown the events calendar
Be the first to know when new unknown vulnerabilities affecting unknown the events calendar are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / The Events Calendar
6.15.0 < 6.17.5
References
Credits
Jashid Sany WPScan