🔴 WordPress Events Calendar Vulnerabilities Let Hackers Take Over 600,000 Websites

Two critical unauthenticated vulnerability chains in the widely used The Events Calendar WordPress plugin could allow attackers to execute code and fully compromise affected websites remotely. These flaws, identified by Wordfence Argus, impact plugin versions up to 6.17.4 and have been patched in version 6.17.4.1.

The Events Calendar is active on over 600,000 WordPress websites, making these vulnerabilities a significant risk for organizations that use the plugin for publishing event schedules, registrations, and community content.