Webnus
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Modern Events Calendar Lite | 7 | – | Oct 14, 2026 |
| Modern Events Calendar | 2 | – | Aug 7, 2024 |
| Modern Events Calendar Lite (WordPress plugin) | 1 | – | Apr 14, 2022 |
Exploited and recent CVEs
- CVE-2026-105067 WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability 0.3%
- CVE-2021-4458 Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection 0.4%
- CVE-2025-5733 Modern Events Calendar <= 7.21.9 - Information Exposure 0.4%
- CVE-2024-6522 Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery 0.4%
- CVE-2024-6522 Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery 0.4%
- CVE-2024-5441 Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload 1.1%
- CVE-2024-5441 Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload 1.1%
- CVE-2023-4021 Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting 0.4%
- CVE-2022-30533 Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0 allows remote an authenticated attacker to inject an arbitrary script via unspecified vectors. 0.6%
- CVE-2022-27848 WordPress Modern Events Calendar Lite plugin <= 6.5.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability 0.6%