Two critical vulnerabilities in a WordPress plugin called The Events Calendar could enable an unauthenticated attacker to ...