CVE-2026-1922 | Brian Hogg The Events Calendar Shortcode & Block Plugin up to 3.1.2 on WordPress cross site scripting

A vulnerability was found in Brian Hogg The Events Calendar Shortcode & Block Plugin up to 3.1.2 on WordPress. It has been classified as problematic. This affects an unknown function of the component Shortcode Handler. This manipulation causes cross site scripting.

This vulnerability appears as CVE-2026-1922. The attack may be initiated remotely. There is no available exploit.