{"vulnerability": "CVE-2026-78006", "sightings": [{"uuid": "80f95ad5-b40c-44cf-8898-74c3ab68b741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvcmxayqve25", "content": "CVE-2026-78006 - the events calendar\nThe Events Calendar add\u2011on for WordPress (versions up to 6.17.4) can be tricked into running any code an attacker sends, without needing a login. This could let a malicious\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#stellarwp #CVE #infosec", "creation_timestamp": "2026-09-12T08:10:04.956222Z"}, {"uuid": "3475d176-4ba0-4992-b962-e318c880cb80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3mvcpr2g3nq23", "content": "\ud83d\udd34 CVE-2026-78006 - Critical (9.8)\n\nThe The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versio...\n\nhttps://www.thehackerwire.com/vulnerability/CVE-2026-78006/\n\n#infosec #cybersecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T09:00:18.897050Z"}, {"uuid": "50bb4236-0c9e-4b86-afbe-45d433e19d22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3mvcq3ocjgy2y", "content": "\ud83d\udd34 CVE-2026-78006 - Critical (9.8)\n\nThe The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versio...\n\nhttps://www.themasherwire.com/vulnerability/CVE-2026-78006/\n\n#infosec #potatosecurity #CVE #vulnerability #security #patchstack", "creation_timestamp": "2026-09-12T09:06:14.312846Z"}, {"uuid": "640fbc09-6ee3-4f14-a77c-0d50b36d819b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/guyvmqtmjocc3", "content": "CVE-2026-78006 - The Events Calendar\nCVE ID : CVE-2026-78006\n \n Published : Sept. 12, 2026, 8:16 a.m. | 43\u00a0minutes ago\n \n Description : The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the is_s...", "creation_timestamp": "2026-09-12T09:30:02.550412Z"}, {"uuid": "42e9081c-e9e7-4a5e-90bf-28a44b0a27fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78006", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117257602626629740", "content": "CVE-2026-78006: CRITICAL RCE in The Events Calendar plugin (<=6.17.4) for WordPress. Unauthenticated attackers can exploit comments to run code on the server. Disable event comments now & check for patches. https://radar.offseq.com/threat/cve-2026-78006-cwe-502-deserialization-of-untrusted-data-in-stellarwp-the-events-calendar-efa20e86741ba4b3 #OffSeq #WordPress #RCE #Vuln", "creation_timestamp": "2026-09-12T10:30:25.168007Z"}, {"uuid": "3103e173-3f52-4551-b54b-0b7450416c51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-78006", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvcusam5ho2y", "content": "The Events Calendar plugin (<=6.17.4) has a CRITICAL RCE vuln (CVE-2026-78006). Unauth'd attackers can exploit event comments. Disable comments & check for updates. https://radar.offseq.com/threat/cve-2026-78006-cwe-502-deserialization-of-untrusted-data-in-stellarwp-the-events-calendar-efa20e8674...", "creation_timestamp": "2026-09-12T10:30:27.350854Z"}, {"uuid": "4699735a-cc95-4a6a-b2a2-8f6b9038b73a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mvctij4db225", "content": "\ud83d\udea8 CVE-2026-78006 \u2014 CVSS 9.8 CRITICAL\n\nThe The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, ...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-78006\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-09-12T10:07:06.463008Z"}, {"uuid": "b84a271c-e568-4e48-a056-4c73968fc059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://gist.github.com/ichintu/835153b1c0908bb605b1d9e1193ac0bc", "content": "This daily cybersecurity briefing highlights four key developments:\n\u2022 **AI in SOCs:** AI-triggered alerts are now the fastest-growing security category, driven by routine enterprise AI adoption rather than targeted attacks.\n\u2022 **New Defense Tool:** The community released the MCP Security Scanner, which identifies and categorizes 12 distinct AI-related risk types.\n\u2022 **AI-Driven Attack:** Coordinated OpenAI agents successfully compromised RubyGems servers, achieving remote code execution.\n\u2022 **Critical Vulnerability:** CVE-2026-78006 (CVSS 9.8) enables unauthenticated RCE in The Events Calendar WordPress plugin (\u22646.17.4) via a comment moderation bypass.\n\nCollectively, these updates underscore AI\u2019s dual impact on cybersecurity\u2014accelerating both defensive tooling and sophisticated attacks\u2014while highlighting urgent patching needs for widely used enterprise software.", "creation_timestamp": "2026-09-12T12:05:16.347349Z"}, {"uuid": "fc8d53a4-7b1c-455f-9cec-8e9e03bf2619", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://t.me/GithubRedTeam/102125", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-78006-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-12 11:42:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-78006 The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-12T14:00:03.361198Z"}, {"uuid": "fc7bc8d5-4aa4-41e2-806e-0a431cfaa3b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvdvasmhki2z", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78006: The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\nCVSS 9.8 \u00b7 EPSS 0.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-78006\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-12T20:11:14.748548Z"}, {"uuid": "ee05705c-819f-4b72-982f-b23d5f3ded0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/102125", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #POC\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a CVE-2026-78006-POC\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a DeadExpl0it\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Python\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-09-12 11:42:16\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nPOC for CVE-2026-78006 The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-09-13T00:00:41.480183Z"}, {"uuid": "0316c882-6983-4913-a832-7f26c10fd69c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117261495402512030", "content": "CVE-2026-78006: The Events Calendar plugin \u22646.17.4 has a CRITICAL RCE flaw. Unauthenticated attackers can run code via comment handling \u2014 disable event comments until patched. Review vendor advisories. https://radar.offseq.com/threat/the-the-events-calendar-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-versions-up-6446d1c8dfcb6a24 #OffSeq #WordPress #CVE202678006 #RCE", "creation_timestamp": "2026-09-13T03:00:24.185201Z"}, {"uuid": "856923a6-3441-45dc-94cd-a4c08390e7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3mvem4iazbe2y", "content": "The Events Calendar plugin for WordPress \u22646.17.4 has a CRITICAL RCE (CVE-2026-78006). Unauthenticated code execution possible \u2014 disable event comments & watch for patches. https://radar.offseq.com/threat/the-the-events-calendar-plugin-for-wordpress-is-vulnerable-to-remote-code-execution-in-all-ve...", "creation_timestamp": "2026-09-13T03:00:27.285242Z"}, {"uuid": "9c23f295-3c52-49d8-93dc-65fdb4350cae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvenhx7rqc27", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78006: The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\nCVSS 9.8 \u00b7 EPSS 0.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-78006\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T03:24:44.530329Z"}, {"uuid": "a532d1a8-6284-4956-95e8-5d65434bedf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mveygyxx7a2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78006: The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\nCVSS 9.8 \u00b7 EPSS 0.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-78006\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T06:41:03.876484Z"}, {"uuid": "f3796f34-aa0a-4043-b898-54da12d6e1db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfcyntdgf2i", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78006: The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\nCVSS 9.8 \u00b7 EPSS 0.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-78006\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T09:49:53.581097Z"}, {"uuid": "cd003c62-162b-4192-be3f-dda6089bba96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfjxweuny2t", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78006: The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\nCVSS 9.8 \u00b7 EPSS 0.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-78006\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T11:54:46.109938Z"}, {"uuid": "4dcc8e79-0cdd-4aa4-97fa-dcde32f8b8cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "content": "", "creation_timestamp": "2026-09-14T03:00:08.963945Z"}, {"uuid": "5f3c016c-8f9e-4e2e-a24e-7caa82f766cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "Telegram/iBj7RYtihqm6hIuCBk6vB4PmaU6fP95etshgJ7uPz9bghck", "content": "", "creation_timestamp": "2026-09-14T03:00:09.272815Z"}, {"uuid": "8cf3f0c7-6f21-473a-90c8-eee6362b5f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "Telegram/NaqXpJzudf_kPemcfRLNgSuhJAIsHS0qYFopzKAZDt10jI8", "content": "", "creation_timestamp": "2026-09-14T03:00:11.412278Z"}, {"uuid": "a8a7a35e-744a-4fbc-9afa-63c9ca1389d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvi3j7a6ov24", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-78006: The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution\nCVSS 9.8 \u00b7 EPSS 0.8%\nhttps://beta.vulnsea.com/cve/CVE-2026-78006\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-14T12:13:58.018303Z"}, {"uuid": "b1c0a720-807c-499f-b54b-dced8cc4bba6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "published-proof-of-concept", "source": "Telegram/-crZ7c2mXyDAnAi6cUoO6ZGLIobDD_pIiFk-5o6QD17WEzY", "content": "", "creation_timestamp": "2026-09-15T00:00:25.258040Z"}, {"uuid": "123907e9-1832-4d48-bcaf-96d4e2707e50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "published-proof-of-concept", "source": "Telegram/NaqXpJzudf_kPemcfRLNgSuhJAIsHS0qYFopzKAZDt10jI8", "content": "", "creation_timestamp": "2026-09-15T00:00:23.876593Z"}, {"uuid": "ba3a14fb-ee03-41ca-8afd-c3daae5e7ef3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "published-proof-of-concept", "source": "Telegram/iBj7RYtihqm6hIuCBk6vB4PmaU6fP95etshgJ7uPz9bghck", "content": "", "creation_timestamp": "2026-09-15T00:00:24.690976Z"}, {"uuid": "e266438c-0526-4544-ba78-f5efa45021c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78006", "type": "seen", "source": "https://bsky.app/profile/opsmatters.com/post/3mvjoy67zf22z", "content": "The latest update for #CyCognito includes \"Emerging Threat: (CVE-2026-78006) The Events Calendar Remote Code Execution via #PHP Object Injection\" and \"Introducing the CyCognito MCP Server: Full Exposure Context, On Demand\".\n \n#cybersecurity #AttackSurfaceManagement #EASM https://opsmtrs.com/44Srq0X", "creation_timestamp": "2026-09-15T03:35:01.151640Z"}]}