{"uuid": "87d2afe0-d5c7-4666-9e0b-6d78ba170888", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-95606", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117402346141419065", "content": "CVE-2026-95606: CRITICAL deserialization of untrusted data in The Events Calendar (<=6.17.4) enables remote object injection & code execution. No patch confirmed \u2014 review vendor advisory. https://radar.offseq.com/threat/deserialization-of-untrusted-data-vulnerability-in-liquid-web-stellarwp-the-events-calendar-allows-c423d4d18fa2f1a5 #OffSeq #WordPress #Vulnerability #CVE202695606", "creation_timestamp": "2026-10-08T00:00:37.475467Z"}