Webnus/ vulnerabilities

Products

• Modern Events Calendar Lite 23

Newest

• unknown modern event calendar pro, modern events calendar lite +1 more Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX Action CVE-2026-102499 7.7 HighOctober 21, 2026
• unknown modern event calendar pro, modern events calendar lite +1 more Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export CVE-2026-96534 7.7 HighOctober 18, 2026
• unknown modern events calendar lite Modern Events Calendar Lite < 7.36.4 - Subscriber+ Arbitrary Post Modification via IDOR CVE-2026-110070 6.5 MediumOctober 18, 2026
• unknown modern events calendar lite Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions CVE-2026-110069 4.3 MediumOctober 18, 2026
• webnus modern events calendar lite WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability CVE-2026-105067 8.5 HighOctober 14, 2026
• unknown modern event calendar pro, modern events calendar lite +1 more Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more CVE-2026-11349 Public exploit 8.6 HighJuly 20, 2026
• webnus modern events calendar lite Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection CVE-2021-4458 5.9 MediumJuly 12, 2025
• webnus/ modern events calendar lite Modern Events Calendar <= 7.21.9 - Information Exposure CVE-2025-5733 5.3 MediumJune 6, 2025
• webnus modern events calendar, modern events calendar lite +1 more Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery CVE-2024-6522 8.5 HighAugust 7, 2024
• webnus modern events calendar, modern events calendar lite +1 more Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload CVE-2024-5441 8.8 HighJuly 9, 2024
• webnus modern events calendar lite Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting CVE-2023-4021 4.4 MediumOctober 20, 2023
• unknown modern events calendar lite Modern Events Calendar lite < 6.5.2 - Admin+ Stored XSS CVE-2023-1400 4.8 MediumMarch 27, 2023
• webnus modern events calendar lite Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows... CVE-2022-30533 5.4 MediumJune 16, 2022
• unknown modern events calendar lite Modern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scripting CVE-2022-0364 EPSS 69.6% 5.4 MediumMarch 21, 2022
• unknown modern events calendar lite Modern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSS CVE-2021-25046 5.4 MediumJanuary 17, 2022
• unknown modern events calendar lite Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection CVE-2021-24946 Public exploit EPSS 72.8% 9.8 CriticalDecember 13, 2021
• unknown modern events calendar lite Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site Scripting CVE-2021-24925 6.1 MediumDecember 13, 2021
• unknown modern events calendar lite Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting CVE-2021-24716 5.4 MediumNovember 1, 2021
• unknown modern events calendar lite Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting CVE-2021-24687 4.8 MediumOctober 4, 2021
• unknown modern events calendar lite Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection CVE-2021-24149 8.8 HighMarch 18, 2021
• unknown modern events calendar lite Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS) CVE-2021-24147 5.4 MediumMarch 18, 2021
• unknown modern events calendar lite Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export CVE-2021-24146 Public exploit EPSS 31.0% 7.5 HighMarch 18, 2021
• unknown modern events calendar lite Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE CVE-2021-24145 Public exploit EPSS 87.2% 7.2 HighMarch 18, 2021