Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-69352 EUVD-2026-0955GHSA-hv7w-366h-5jcm

WordPress The Events Calendar plugin <= 6.15.12.2 - Broken Access Control vulnerability

Published Jan 6, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in StellarWP The Events Calendar the-events-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Events Calendar: from n/a through <= 6.15.12.2.

Affected products

VendorProductAffectedFixed
StellarWP The Events Calendar ≤ 6.15.12.2 —

References