EIP-2026-114081

PRE-CVE

WordPress Plugin spider Calendar - Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-114081. PoCs published by D4NB4R.

AI-analyzed exploit summary The exploit demonstrates XSS, SQL injection, and HTTP Parameter Pollution vulnerabilities in the WordPress Spider Calendar plugin version 1.0.1. It includes crafted URLs to trigger these vulnerabilities without requiring authentication.

Description

WordPress Plugin spider Calendar - Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by D4NB4R · textwebappsphp

https://www.exploit-db.com/exploits/21715

View Code ZIP pw:eip

The exploit demonstrates XSS, SQL injection, and HTTP Parameter Pollution vulnerabilities in the WordPress Spider Calendar plugin version 1.0.1. It includes crafted URLs to trigger these vulnerabilities without requiring authentication.

Classification

Working Poc 90%

Attack Type

Xss | Sqli | Other

Complexity

Trivial

Reliability

Reliable

Target: WordPress Spider Calendar Plugin 1.0.1

No auth needed

Prerequisites: Access to the vulnerable WordPress plugin

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026