Skip to contentWebnus/ Modern Events Calendar Lite vulnerabilities
- unknown modern event calendar pro, modern events calendar lite +1 moreModern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX ActionCVE-2026-1024997.7 High
- unknown modern event calendar pro, modern events calendar lite +1 moreModern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_exportCVE-2026-965347.7 High
- unknown modern events calendar liteModern Events Calendar Lite < 7.36.4 - Subscriber+ Arbitrary Post Modification via IDORCVE-2026-1100706.5 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX ActionsCVE-2026-1100694.3 Medium
- webnus modern events calendar liteWordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerabilityCVE-2026-1050678.5 High
- unknown modern event calendar pro, modern events calendar lite +1 moreModern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_moreCVE-2026-11349Public exploit8.6 High
- webnus modern events calendar liteModern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL InjectionCVE-2021-44585.9 Medium
- webnus/ modern events calendar liteModern Events Calendar <= 7.21.9 - Information ExposureCVE-2025-57335.3 Medium
- webnus modern events calendar, modern events calendar lite +1 moreModern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request ForgeryCVE-2024-65228.5 High
- webnus modern events calendar, modern events calendar lite +1 moreModern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File UploadCVE-2024-54418.8 High
- webnus modern events calendar liteModern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site ScriptingCVE-2023-40214.4 Medium
- unknown modern events calendar liteModern Events Calendar lite < 6.5.2 - Admin+ Stored XSSCVE-2023-14004.8 Medium
- webnus modern events calendar liteCross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows...CVE-2022-305335.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site ScriptingCVE-2022-0364EPSS 69.6%5.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSSCVE-2021-250465.4 Medium
- unknown modern events calendar liteModern Events Calendar < 6.1.5 - Unauthenticated Blind SQL InjectionCVE-2021-24946Public exploitEPSS 72.8%9.8 Critical
- unknown modern events calendar liteModern Events Calendar Lite < 6.1.5 - Reflected Cross-Site ScriptingCVE-2021-249256.1 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site ScriptingCVE-2021-247165.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site ScriptingCVE-2021-246874.8 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.6 - Authenticated SQL InjectionCVE-2021-241498.8 High
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)CVE-2021-241475.4 Medium
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Unauthenticated Events ExportCVE-2021-24146Public exploitEPSS 31.0%7.5 High
- unknown modern events calendar liteModern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCECVE-2021-24145Public exploitEPSS 88.2%7.2 High