CVE-2026-0868

CVE

Threat entity extracted from intelligence sources

Frequency

2

occurrences

First Seen

April 19, 2026

Last Seen

April 19, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

CVE-2026-0868: Stored XSS Vulnerability in EMC Calendly Plugin for WordPress59.0

The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting (XSS) in all versions up to and including 4.4. This vulnerability arises from insufficient input sanitization and output escaping on user-supplied attributes in the plugin's calendly...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

CVE-2026-0868: Stored XSS Vulnerability in EMC Calendly Plugin for WordPress

Apr 19·1 sources

Related Articles (2)

Report: CVE-2026-0868 - EMC Scheduling Manager <= 4.4 - authenticated (contributor+) stored cross-site sc InfinitSec - Cyber Tech Crypto Gaming News / 5h CVE ID :CVE-2026-0868 Published : April 19, 2026, 4:16 a.m. 1 hour, 45 minutes ago Description :The EMC – Easily Embed Calendly Scheduling Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's calendly shortcode in all versions up to, and including, 4.4 due to insufficient input sanitization and output e

infinitsec.net·Apr 19

CVE-2026-0868 - Exploits & Severity

Related Entities

Cross-site Scripting Stored Cross-Site Scripting CWE-79 - Cross-site Scripting (xss)WordPress XSS