Skip to content
OpenAdvisories

Vendor

Marcus (aka @msykes)

8 known vulnerabilities.

Products

WP FullCalendar 3 Events Manager 2 Login With Ajax 2 Meta Tag Manager 1
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-66640

    WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability

    Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions.

    Marcus (aka @msykes) Login With Ajax
  • Medium 5.3
    CVE-2026-24523

    WordPress WP FullCalendar plugin <= 1.6 - Sensitive Data Exposure vulnerability

    Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through <= 1.6.

    Marcus (aka @msykes) WP FullCalendar
  • Medium 5.3
    CVE-2025-1249

    WordPress Events Manager plugin <= 6.6.4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through <= 6.6.4.1.

    Marcus (aka @msykes) Events Manager
  • Medium 4.3
    CVE-2025-22260

    WordPress Meta Tag Manager plugin <= 3.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Marcus (aka @msykes) Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through <= 3.1.

    Marcus (aka @msykes) Meta Tag Manager
  • Medium 6.5
    CVE-2025-22261

    WordPress WP FullCalendar plugin <= 1.5 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Stored XSS.This issue affects WP FullCalendar: from n/a through <= 1.5.

    Marcus (aka @msykes) WP FullCalendar
  • Medium 4.3
    CVE-2023-49859

    WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Marcus (aka @msykes) Login With Ajax login-with-ajax allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login With Ajax: from n/a through <= 4.1.

    Marcus (aka @msykes) Login With Ajax