Marcus (aka @msykes) vulnerabilities
We track 2 vulnerabilities in Marcus (aka @msykes) products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 13, 2026.
2vulnerabilities
0critical
2high
0exploited
8.2average CVSS score
Latest Marcus (aka @msykes) vulnerabilities
- 8.8 High severity
Events Manager: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in Marcus (aka @msykes) Events Manager events-manager allows Object Injection.This issue affects Events Manager: from n/a through <= 7.3.6.
- 7.5 High severity
WP FullCalendar: Missing Authorization
Missing Authorization vulnerability in Marcus (aka @msykes) WP FullCalendar wp-fullcalendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP FullCalendar: from n/a through <= 1.6.