Unknown Modern Events Calendar Lite

• CVE-2026-102499 High 7.7 Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_attendees AJAX Action 0.4%
• CVE-2026-96534 High 7.7 Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export 0.2%
• CVE-2026-110070 Medium 6.5 Modern Events Calendar Lite < 7.36.4 - Subscriber+ Arbitrary Post Modification via IDOR 0.2%
• CVE-2026-110069 Medium 4.3 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions 0.2%
• CVE-2026-11349 High 8.6 Modern Events Calendar (Lite & Pro) < 7.34.0 - Unauthenticated SQL Injection via mec_list_load_more 0.5%
• CVE-2023-1400 Medium 4.8 Modern Events Calendar lite < 6.5.2 - Admin+ Stored XSS 0.5%
• CVE-2022-0364 Unrated Modern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scripting 69.6%
• CVE-2021-25046 Unrated Modern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSS 0.6%
• CVE-2021-24946 Unrated Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection 72.8%
• CVE-2021-24925 Unrated Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site Scripting 0.8%
• CVE-2021-24716 Unrated Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting 0.7%
• CVE-2021-24687 Unrated Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting 0.6%
• CVE-2021-24147 Unrated Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS) 0.7%
• CVE-2021-24146 Unrated Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export 31.0%
• CVE-2021-24149 Unrated Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection 1.5%
• CVE-2021-24145 Unrated Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE 87.2%