The Events Calendar: Two Unauthenticated RCE Chains via Unapproved Comments

1. Basic Information Original Title: Wordfence Argus Identifies Two Critical Unauthenticated Vulnerability Chains Leading to Remote Code Execution in The Events Calendar Plugin Source: Wordfence Published Date: 2026-09-14 Updated Date: None Severity: Critical Severity Rationale: Both vulnerabilities have a CVSS score of 9.8. On event pages where...