CVE-2026-105067
CVE-2026-105067 · WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite allows Blind SQL Injection.This issue affects Modern Events Calendar Lite: from n/a before 7.37.0.
CVSS 8.5 · High · EPSS 0.3% · Fix available
- Published
- Updated
Affected products and versions
modern events calendar lite
- Versions
- ≥ 0, < 7.37.0: Affected; ≥ 7.37.0: Not affected (custom)
Update to 7.37.0