Webnus

Products

ProductCVEsExploitedLatest
Modern Events Calendar Lite7–Oct 14, 2026
Modern Events Calendar2–Aug 7, 2024
Modern Events Calendar Lite (WordPress plugin)1–Apr 14, 2022

Exploited and recent CVEs

  • CVE-2026-105067 High 8.5 WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability 0.3%
  • CVE-2021-4458 Medium 5.9 Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection 0.4%
  • CVE-2025-5733 Medium 5.3 Modern Events Calendar <= 7.21.9 - Information Exposure 0.4%
  • CVE-2024-6522 High 8.5 Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery 0.4%
  • CVE-2024-6522 High 8.5 Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery 0.4%
  • CVE-2024-5441 High 8.8 Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload 1.1%
  • CVE-2024-5441 High 8.8 Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload 1.1%
  • CVE-2023-4021 Medium 4.4 Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting 0.4%
  • CVE-2022-30533 Unrated Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors. 0.6%
  • CVE-2022-27848 Low 3.4 WordPress Modern Events Calendar Lite plugin <= 6.5.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%