Webnus vulnerabilities
We track 3 vulnerabilities in Webnus products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest Webnus vulnerabilities
- 8.5 High severity
Modern Events Calendar Lite: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite allows Blind SQL Injection.This issue affects Modern Events Calendar Lite: from n/a before 7.37
- 9.6 Critical severity
Modern Events Calendar: Server-Side Request Forgery
The Modern Events Calendar plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.12.1 via the 'mec_fes_form' AJAX function. This makes it possible for authenticated attackers, with Subscriber-level access and
- 8.8 High severity
Modern Events Calendar: Unrestricted Upload of File with Dangerous Type
The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image function in all versions up to, and including, 7.11.0. This makes it possible for authenticated attackers, wit