VulnerabilitiesTwo Critical Flaws in The Events Calendar Plugin Put 200,000 WordPress Sites at Risk
Anyone can exploit the bugs without logging in, and a successful attack hands full control of a website to the attacker. Patches exist, but roughly half of all installations may not have them yet.
