StellarWP

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 16, 2026
Last mentionedSep 16, 2026

Timeline

1 articles · newest first

Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover

Two unauthenticated CVSS 9.8 code-injection and PHP object injection flaws in The Events Calendar plugin expose 200,000+ WordPress sites to RCE and takeover.

SecurityWeekSep 16, 11:32 UTC · Sep 16, 2026VulnerabilityCVE-2026-78159 CVE-2026-780063 · 1 read

Related CVEs

by mentions

CVE-2026-780061%9.8
Unauthenticated RCE in The Events Calendar WordPress Plugin
published Sep 12, 2026StellarWP (The Events Calendar) The Events Calendar WordPress pluginPoC ×2
CVE-2026-781599.8
Unauthenticated Remote Code Execution in The Events Calendar WordPress Plugin
published Sep 12, 2026StellarWP The Events Calendar (WordPress plugin)

Appears with

Defiantvendor · 1
WordPressproduct · 1
The Events Calendarproduct · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.