Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Modern Events Calendar Lite 7.37.0 Clear all filters
TI-2026-75553 CVE-2026-96534 · GHSA-4723-cp2j-hhv7

SQL injection in Modern Events Calendar plugins via mec_fes_csv_export

Priority LOW 33

The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00213 Published 2026-10-18 Fixed in 7.37.0 CWE-89
TI-2026-76036 CVE-2026-110069 · GHSA-7w3g-hjq7-wm77

Sensitive data disclosure in Modern Events Calendar Lite plugin

Priority LOW 19

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscrib…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00176 Published 2026-10-18 Fixed in 7.37.0 CWE-200