Title: Remote Code Execution Vulnerability
Last modified: September 18, 2026

---

# Remote Code Execution Vulnerability

 *  Resolved [cogdog](https://wordpress.org/support/users/cogdog/)
 * (@cogdog)
 * [7 hours, 6 minutes ago](https://wordpress.org/support/topic/remote-code-execution-vulnerability-2/)
 * I was sent this notice of a vulnerability in this plugin up to version 6.17.4,
   and I do not see any note of attention to this (unless I missed it) in 6.17.5
 * [https://nvd.nist.gov/vuln/detail/cve-2026-78006](https://nvd.nist.gov/vuln/detail/cve-2026-78006)
 * We do not allow comments to events on pur sites, but it still worrisome.

Viewing 2 replies - 1 through 2 (of 2 total)

 *  [7thcircle](https://wordpress.org/support/users/7thcircle/)
 * (@7thcircle)
 * [2 hours, 49 minutes ago](https://wordpress.org/support/topic/remote-code-execution-vulnerability-2/#post-19023854)
 * This was patched in 6.17.4.1
 * [https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/the-events-calendar/the-events-calendar-6174-unauthenticated-php-object-injection-to-remote-code-execution](https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/the-events-calendar/the-events-calendar-6174-unauthenticated-php-object-injection-to-remote-code-execution)
 *  Thread Starter [cogdog](https://wordpress.org/support/users/cogdog/)
 * (@cogdog)
 * [1 hour, 38 minutes ago](https://wordpress.org/support/topic/remote-code-execution-vulnerability-2/#post-19023875)
 * thanks for confirming the patch!

Viewing 2 replies - 1 through 2 (of 2 total)

You must be [logged in](https://login.wordpress.org/?redirect_to=https%3A%2F%2Fwordpress.org%2Fsupport%2Ftopic%2Fremote-code-execution-vulnerability-2%2F%3Foutput_format%3Dmd&locale=en_US)
to reply to this topic.

 * ![](https://ps.w.org/the-events-calendar/assets/icon-256x256.gif?rev=2516440)
 * [The Events Calendar](https://wordpress.org/plugins/the-events-calendar/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/the-events-calendar/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/the-events-calendar/)
 * [Active Topics](https://wordpress.org/support/plugin/the-events-calendar/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/the-events-calendar/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/the-events-calendar/reviews/)

## Tags

 * [plugin](https://wordpress.org/support/topic-tag/plugin/)

 * 2 replies
 * 2 participants
 * Last reply from: [cogdog](https://wordpress.org/support/users/cogdog/)
 * Last activity: [1 hour, 38 minutes ago](https://wordpress.org/support/topic/remote-code-execution-vulnerability-2/#post-19023875)
 * Status: resolved