CVE-2026-102499 | Modern Events Calendar Lite Plugin up to 7.36.x on WordPress sql injection

October 21, 2026 Yanac

A vulnerability identified as critical has been detected in Modern Events Calendar Lite Plugin and Modern Event Calendar Pro Plugin up to 7.36.x on WordPress. The affected element is an unknown function. This manipulation causes sql injection.

This vulnerability appears as CVE-2026-102499. The attack may be initiated remotely. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More