Modern Event Calendar Pro vulnerabilities
We track 3 vulnerabilities in Modern Event Calendar Pro products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Modern Event Calendar Pro vulnerabilities
- 7.7 High severity
Modern Events Calendar Lite: Improper Neutralization of Special Elements used in an SQL Command
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter before using it in a SQL statement, which allows authenticated users with Subscriber-level access an
- 7.7 High severity
Modern Events Calendar Lite: Improper Neutralization of Special Elements used in an SQL Command
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges (Subscrib
- 8.6 High severity
Modern Event Calendar Pro: Improper Neutralization of Special Elements used in an SQL Command
The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action available to unauthenticated user