low2.7
CVE-2026-84742
The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST AP…
Impact
The Events Calendar WordPress plugin before 6.17.5 does not check the capability required to publish content before creating or updating it through its REST API, allowing users with a role that cannot normally publish, such as contributor, to publish content directly and bypass editorial review.
Affected products
| Product | Affected versions |
|---|---|
| Events Calendar WordPress Plugin | before 6.17.5 |
Versions were read from the advisory text. No structured product data has been published for this record yet.