CVE-2026-95606

Published 7 October 2026 · tracked since 8 October 2026

Description

Deserialization of Untrusted Data vulnerability in Liquid Web / StellarWP The Events Calendar allows Object Injection.This issue affects The Events Calendar: from n/a through 6.17.4.

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-76266 HIGH 7.7
• CVE-2026-1403 MEDIUM 6.5
• CVE-2026-107229 MEDIUM 4
• CVE-2026-107353 MEDIUM 6.5
• CVE-2026-107161 HIGH 7.5
• CVE-2026-107313 MEDIUM 4.2
• CVE-2026-103371
• CVE-2026-107215 HIGH 7.5
• CVE-2026-107211
• CVE-2026-95534 HIGH 8.8

→ Open the live CVE board · all tools