The Events Calendar Vulnerability: Two RCE Chains, Patch Now
Two unauthenticated RCE chains in The Events Calendar (CVE-2026-78006 and CVE-2026-78159) start from an event comment. Who is exposed, WP-CLI checks for one site or a fleet, the patch, and what to hunt for.