200,000 WordPress sites at risk from unauthenticated RCE flaws

Vulnerabilities in The Events Calendar plugin expose 200,000 sites to remote code execution attacks.

Published 3h1 sourceImportant

≈ 16sSpeed

The fact

The flaws enable full takeover without prior authentication.

Administrators are urged to update the plugin immediately.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on September 16, 2026