Unknown Modern Event Calendar Pro vulnerabilities

2 vulnerabilities

Known vulnerabilities in Unknown Modern Event Calendar Pro, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.7CVE-2026-96534unknownmodern event calendar pro+1
EPSS score
0.21%
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges (Subscriber and above) to perform SQL injection attacks.8.6CVE-2026-11349unknownmodern event calendar pro+2
EPSS score
0.45%
The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection vulnerability that allows attackers to extract sensitive data from the database.