WP FullCalendar, CVE-2026-24523

CVE, Research URL: CVE-2026-24523
Home page URL: Security reports for WP FullCalendar
Application: WP FullCalendar
Published on: Jan 23, 2026
Research Description: Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through <= 1.6.
Affected versions: max 1.6.
Status: vulnerable