Skip to content
OpenAdvisories
High · 8.5 CVE-2026-105067 EUVD-2026-100988GHSA-9pmx-8rm5-r7mg

WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability

Published Oct 14, 2026 · Updated Oct 15, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite allows Blind SQL Injection.This issue affects Modern Events Calendar Lite: from n/a before 7.37.0.

Affected products

VendorProductAffectedFixed
Webnus Modern Events Calendar Lite < 7.37.0 7.37.0

References