Modern Events Calendar Lite vulnerabilities
We track 3 vulnerabilities in Modern Events Calendar Lite products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 21, 2026.
Latest Modern Events Calendar Lite vulnerabilities
- 7.7 High severity
Modern Events Calendar Lite: Improper Neutralization of Special Elements used in an SQL Command
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter before using it in a SQL statement, which allows authenticated users with Subscriber-level access an
- 7.7 High severity
Modern Events Calendar Lite: Improper Neutralization of Special Elements used in an SQL Command
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges (Subscrib
- 8.6 High severity
Modern Event Calendar Pro: Improper Neutralization of Special Elements used in an SQL Command
The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action available to unauthenticated user