CVE-2026-84740 | The Events Calendar Plugin up to 6.17.5 on WordPress Shortcode injection

October 2, 2026 Yanac

A vulnerability has been found in The Events Calendar Plugin up to 6.17.5 on WordPress and classified as critical. Affected is an unknown function of the component Shortcode Handler. The manipulation leads to injection.

This vulnerability is documented as CVE-2026-84740. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More