Skip to contentUnknown Modern Events Calendar Lite vulnerabilities
- unknown modern event calendar pro, modern events calendar lite +1 moreModern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX ActionCVE-2026-1024997.7 High
- unknown modern event calendar pro, modern events calendar lite +1 moreModern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_exportCVE-2026-965347.7 High
- unknown modern events calendar liteModern Events Calendar Lite < 7.36.4 - Subscriber+ Arbitrary Post Modification via IDORCVE-2026-1100706.5 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX ActionsCVE-2026-1100694.3 Medium
- unknown modern event calendar pro, modern events calendar lite +1 moreModern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_moreCVE-2026-11349Public exploit8.6 High
- unknown modern events calendar liteModern Events Calendar lite < 6.5.2 - Admin+ Stored XSSCVE-2023-14004.8 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site ScriptingCVE-2022-0364EPSS 69.6%5.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSSCVE-2021-250465.4 Medium
- unknown modern events calendar liteModern Events Calendar < 6.1.5 - Unauthenticated Blind SQL InjectionCVE-2021-24946Public exploitEPSS 72.8%9.8 Critical
- unknown modern events calendar liteModern Events Calendar Lite < 6.1.5 - Reflected Cross-Site ScriptingCVE-2021-249256.1 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site ScriptingCVE-2021-247165.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site ScriptingCVE-2021-246874.8 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.6 - Authenticated SQL InjectionCVE-2021-241498.8 High
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-241475.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Unauthenticated Events ExportCVE-2021-24146Public exploitEPSS 31.0%7.5 High
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCECVE-2021-24145Public exploitEPSS 88.2%7.2 High