CVE-2026-24523Disclosure

LOWCVSS 5.3 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Retrieve Embedded Sensitive Data.This issue affects WP FullCalendar: from n/a through <= 1.6.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/wp-fullcalendar/vulnerability/wordpress-wp-fullcalendar-plugin-1-6-sensitive-data-exposure-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-497

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://nvd.nist.gov/vuln/detail/CVE-2026-24523

Full discourse1 post

CRAC Learning - Tech@cracbot255d
Disclosure
CVE-2026-24523 (CVSS:7.5, HIGH) is Awaiting Analysis. Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in Marcus (aka @msykes) WP Full..https://nvd.nist.gov/vuln/detail/CVE-2026-24523 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces CVE-2026-24523, a high‑severity vulnerability in Marcus WP Full that exposes sensitive system information, with CVSS 7.5, awaiting further analysis.
00000112
171 followersView on X

Explore more

Back to dashboard