CVE-2026-11349 | Modern Event Calendar Pro Plugin up to 7.33.x on WordPress Ajax Request sql injection

July 20, 2026 Yanac

A vulnerability was found in Modern Event Calendar Pro Plugin and Modern Events Calendar Lite Plugin up to 7.33.x on WordPress. It has been classified as critical. Impacted is an unknown function of the component Ajax. This manipulation of the argument Request causes sql injection.

The identification of this vulnerability is CVE-2026-11349. It is possible to initiate the attack remotely. There is no exploit available.VulDB Recent EntriesRead More