Skip to content
OpenAdvisories

Vendor

Webnus

10 known vulnerabilities.

Products

Modern Events Calendar Lite 7 Modern Events Calendar 4 Modern Events Calendar Lite (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.5
    CVE-2026-105067

    WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite allows Blind SQL Injection.This issue affects Modern Events Calendar Lite: from n/a before 7.3…

    Webnus Modern Events Calendar Lite
  • High 8.5
    CVE-2024-6522

    Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery

    The Modern Events Calendar plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.12.1 via the 'mec_fes_form' AJAX function. This makes it possible for authenticated attackers, with Subscriber-level access an…

    Webnus Modern Events Calendar Lite Modern Events Calendar Web / CMS
  • High 8.8
    CVE-2024-5441

    Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload

    The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the set_featured_image function in all versions up to, and including, 7.11.0. This makes it possible for authenticated attackers, wi…

    Webnus Modern Events Calendar Lite Modern Events Calendar Web / CMS