Skip to content
Sign in

Vendor

stellarwp

Alert
No stellarwp CVE is in the CISA KEV catalogue.

Tracked since 15 Sep · latest article 21 Sep · RSS · API

0Open KEV deadlines

None open

0Added to KEV · 90 days

of 0 in the full CISA catalogue · all time

0High exploit odds · current

EPSS top 5%, not in KEV

0Articles · 7 days

none this week

Exploited, by due date

No stellarwp CVE is in the CISA KEV catalogue.

Patch cadence and exploit odds

How often CISA adds stellarwp CVEs, how many have a fix, and where their exploit odds sit.

Added to CISA KEV per quarter

CISA has not added a stellarwp CVE to KEV.

Fix listed

0 of 2 CVEs in coverage

2 CVEs have no vendor fix recorded yet.

EPSS percentile of each CVE

One dot per CVE; a red diamond marks those in CISA KEV.

top 5%CVE-2026-78006: 73.7th percentileCVE-2026-78159: 72.3th percentile050100
Show as table
FIRST EPSS percentiles across CVEs in coverage
CVEEPSS percentile
CVE-2026-7800673.7
CVE-2026-7815972.3

Coverage3 articles · all time

The latest 3 articles naming stellarwp, in the shared story grammar.

Full timeline
Quiet for 6 weekslast report 21 Sep3 articles2 outlets

3 articles from 2 outlets since 15 Sep. Quiet since 21 Sep.

Now15 Sep161718192021First reportSecurityOnline · 15 Sep, 02:22Exploited CVESecurityOnline · 21 Sep
  • Tue 15 Sep, 02:22 UTC. SecurityOnline, first report. Critical WordPress Plugin Flaws Put 600,000 Sites at Risk.
  • Wed 16 Sep, 11:57 UTC. SecurityWeek, its first report on the story. Critical WordPress Calendar Flaws Put 200,000 Sites at Risk of Takeover.
  • Mon 21 Sep, 02:59 UTC. SecurityOnline. Cisco Warns of Actively Exploited Flaws Enabling Root Access. Cites a CVE in CISA KEV.
  • Known exploited CVE
  • CVE not in KEV
  • No CVE
  • Larger: an outlet’s first report
  • Coverage over time
  • Quiet time, folded
Show all 3 articles as a list
  1. Tue 15 SepDay 01
    1. Critical WordPress Plugin Flaws Put 600,000 Sites at Risk02:22 · SecurityOnline · First report
  2. Wed 16 SepDay 11
    1. Critical WordPress Calendar Flaws Put 200,000 Sites at Risk of Takeover11:57 · SecurityWeek

  3. Quiet for 5 days

    Mon 21 SepDay 61
    1. Cisco Warns of Actively Exploited Flaws Enabling Root Access02:59 · SecurityOnline · Exploited CVE · Picked up again · Known exploited CVE

All CVEs in coverage2

Exploited first, then by EPSS

In the CVE tracker
  • CVE-2026-78006

    The Events Calendar <= 6.17.4 - Unauthenticated PHP Object Injection to Remote Code Execution

    9.8Critical1.5% EPSS · 3 articles
  • CVE-2026-78159

    The Events Calendar <= 6.17.3 - Unauthenticated Code Injection to Remote Code Execution via Widget 'classes' Map Callable Invocation

    9.8Critical1.4% EPSS · 2 articles
CyberSIXTSignal over noise
Updated AboutDevelopersSign in