{"uuid": "20dcd1a3-305c-41ee-b6bb-62c3fc9fdad1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78159", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117280605916782332", "content": "CRITICAL: The Events Calendar WP plugin (<6.17.4.1) has two unauthenticated RCEs \u2014 CVE-2026-78159 (code injection) & CVE-2026-78006 (object injection, comments enabled). 240K+ sites at risk. Update now: https://radar.offseq.com/threat/unauthenticated-rce-flaws-could-expose-200000-wordpress-sites-to-takeover-7f3911d49bdf2638 #OffSeq #WordPress #RCE #Vuln", "creation_timestamp": "2026-09-16T12:00:27.627092Z"}