Skip to main content

Sploitus

Home
CVE-2026-78265
cve

Exploit for CVE-2026-78265

cve · 2026-08-24

Description

Unauthenticated PHP Object Injection in The Events Calendar up to 6.17.2.

CVSS 9.8 for CVE-2026-78265

9.8

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

0.3%higher than 23.6% of all CVEs

Updated 2026-08-27

CVE Information

References

https://patchstack.com/database/wordpress/plugin/the-events-calendar/vulnerability/wordpress-the-events-calendar-plugin-6-17-2-php-object-injection-vulnerability?_s_id=cve

Exploit Details

Modified:2026-08-26 16:19

Last Seen:2026-08-26 16:26

Reporter:Patchstack

Tags

The Events CalendarObject InjectionUnauthenticatedPHP

Exploit Code

MARKDOWN2 lines

## https://sploitus.com/exploit?id=CVE-2026-78265
Unauthenticated PHP Object Injection in The Events Calendar <= 6.17.2 versions.

Share

Share this link:

Share on social media:

API•X•RSS•Atom

powered by

All product names, logos, and brands are property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, logos, and brands does not imply endorsement.