Skip to content
OpenAdvisories

Vendor

Webnus

10 known vulnerabilities.

Products

Modern Events Calendar Lite 7 Modern Events Calendar 4 Modern Events Calendar Lite (WordPress plugin) 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-32583

    WordPress Modern Events Calendar plugin <= 7.29.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Webnus Inc. Modern Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modern Events Calendar: from n/a through 7.29.0.

    Webnus Modern Events Calendar
  • Medium 5.9
    CVE-2021-4458

    Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection

    The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wp_ajax_mec_load_single_page' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied paramete…

    Webnus Modern Events Calendar Lite Web / CMS
  • Medium 5.3
    CVE-2025-5733

    Modern Events Calendar <= 7.21.9 - Information Exposure

    The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 7.21.9. This is due improper or insufficient validation of the id property when exporting calendars. This makes it possible for un…

    Webnus Modern Events Calendar Lite Web / CMS
  • Medium 4.4
    CVE-2023-4021

    Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Modern Events Calendar lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Google API key and Calendar ID in versions up to, but not including, 7.1.0 due to insufficient input sanitization and output escaping. This makes it possible…

    Webnus Modern Events Calendar Lite Web / CMS