WP FullCalendar, CVE-2026-22351

CVE, Research URL: CVE-2026-22351
Home page URL: Security reports for WP FullCalendar
Application: WP FullCalendar
Published on: Feb 20, 2026
Research Description: Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <= 1.6.
Affected versions: max 1.6.
Status: vulnerable