{"uuid": "0191a399-b196-462a-8a64-8c8dd9271d92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-78159", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mvcmxdfmwh2p", "content": "CVE-2026-78159 - the events calendar\nThe Events Calendar add\u2011on for WordPress can be tricked into executing any code an attacker supplies, even without logging in. The problem occurs when a crafted comment is\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#stellarwp #CVE #infosec", "creation_timestamp": "2026-09-12T08:10:07.352943Z"}