CVE-2026-14827 | Calendar Plugin up to 1.3.17 on WordPress Event cross site scripting

July 27, 2026 Yanac

A vulnerability, which was classified as problematic, was found in Calendar Plugin up to 1.3.17 on WordPress. The affected element is an unknown function. Such manipulation of the argument Event leads to cross site scripting.

This vulnerability is listed as CVE-2026-14827. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More