Threat database

7 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	6.5	EPSS 0.2%	CVE-2026-66640Login With Ajax · Cross-site Scripting Medium6.5EPSS 0.2%2026-08-18CVE Database V5CVE-2026-66640 Contributor Cross Site Scripting (XSS) in Login With Ajax <= 4.5.1 versions. EPSS 0.2%Vulnerability Marcus (aka @msykes)#cwe-79	CVE Database V5	2026-08-18
High	8.8	EPSS 0.5%	CVE-2026-57713Events Manager · Deserialization of Untrusted Data High8.8EPSS 0.5%2026-07-13CVE Database V5CVE-2026-57713 Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6. EPSS 0.5%Vulnerability Marcus (aka @msykes)#cwe-502	CVE Database V5	2026-07-13
High	7.5	EPSS 0.3%	CVE-2026-22351WP FullCalendar · Missing Authorization High7.5EPSS 0.3%2026-02-20CVE Database V5CVE-2026-22351 Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <= 1.6. EPSS 0.3%Vulnerability Marcus (aka @msykes)	CVE Database V5	2026-02-20
Medium	5.3	EPSS 0.3%	CVE-2026-24523WP FullCalendar · Exposure of Sensitive System Information to an Unauthorized Control Sphere in Marcus (aka @msykes) WP… Medium5.3EPSS 0.3%2026-01-23CVE Database V5CVE-2026-24523 Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through <= 1.6. EPSS 0.3%Vulnerability Marcus (aka @msykes)	CVE Database V5	2026-01-23
Medium	5.3	EPSS 0.3%	CVE-2025-1249Events Manager · Missing Authorization Medium5.3EPSS 0.3%2025-02-26CVE Database V5CVE-2025-1249 Missing Authorization vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Events Manager: from n/a through <= 6.6.4.1. EPSS 0.3%Vulnerability Marcus (aka @msykes)	CVE Database V5	2025-02-26
Medium	4.3	EPSS 0.4%	CVE-2025-22260Meta Tag Manager · Missing Authorization Medium4.3EPSS 0.4%2025-02-03CVE Database V5CVE-2025-22260 Missing Authorization vulnerability in Marcus (aka @msykes) Meta Tag Manager meta-tag-manager.This issue affects Meta Tag Manager: from n/a through <= 3.1. EPSS 0.4%Vulnerability Marcus (aka @msykes)	CVE Database V5	2025-02-03
Medium	6.5	EPSS 0.3%	CVE-2025-22261WP FullCalendar · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Marcus (aka… Medium6.5EPSS 0.3%2025-01-07CVE Database V5CVE-2025-22261 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Stored XSS.This issue affects WP FullCalendar: from n/a through <= 1.5. EPSS 0.3%Vulnerability Marcus (aka @msykes)	CVE Database V5	2025-01-07

Showing 1–7 of 7 results