网安资讯详情 - SecLens 情报雷达

CVE-2026-13390 | The Events Calendar Plugin up to 6.8.2.1 on WordPress Event Aggregator Import authorization

来源： vuldb · 发布时间 2026-07-27 14:34 (UTC+08:00) · 抓取时间 2026-07-27 15:00 (UTC+08:00)

原文链接

摘要

A vulnerability, which was classified as <a href="https://vuldb.com/kb/risk">critical</a>, has been found in <a href="https://vuldb.com/product/the_events_calendar_plugin">The Events Calendar Plugin up to 6.8.2.1</a> on WordPress. This affects an unknown part of the component <em>Event Aggregator Import</em>. The manipulation leads to missing authorization. This vulnerability is listed as <a href="https://vuldb.com/cve/CVE-2026-13390">CVE-2026-13390</a>. The attack may be initiated remotely. There is no available exploit. It is advisable to upgrade the affected component.

标签

• CVE-2026-13390

扩展字段

{
  "raw_pub_date": "Mon, 27 Jul 2026 08:34:39 +0200"
}