← WordPress Vulnerabilities
WordPress security by component

Modern Event Calendar Pro, Modern Events Calendar Lite

Modern Event Calendar Pro, Modern Events Calendar Lite is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jul 20, 2026; the highest CVE/CNA score is 8.6.

Plugin slug: modern-event-calendar-pro

CVE-2026-11349: Modern Event Calendar Pro, Modern Events Calendar Lite: SQL injection

Modern Event Calendar Pro, Modern Events Calendar Lite is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is < 7.34.0.

PublishedJul 20, 2026
Known safe version7.34.0
Safe version
Jul 20, 2026 CVE-2026-11349
Modern Event Calendar Pro, Modern Events Calendar Lite: SQL injection
Modern Event Calendar Pro, Modern Events Calendar Lite is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is < 7.34.0.
7.34.0
CVE8.6
NVDPending