Advisories · Technology
Webnus Modern Events Calendar Lite.
Every CVE that names Webnus Modern Events Calendar Lite among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.5 High
WordPress Modern Events Calendar Lite plugin < 7.37.0 - SQL Injection vulnerability
- Webnus Modern Events Calendar Lite
- SQL injection
- CVSS 5.9 Medium
Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection
- webnus/ Modern Events Calendar Lite
- SQL injection
- CVSS 5.3 Medium
Modern Events Calendar <= 7.21.9 - Information Exposure
- webnus/ Modern Events Calendar Lite
- Information disclosure
- CVSS 8.5 High
Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery
- Webnus Modern Events Calendar
- webnus/ Modern Events Calendar Lite
- Server-side request forgery (SSRF)
- CVSS 8.8 High
Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload
- Webnus Modern Events Calendar
- webnus/ Modern Events Calendar Lite
- Unrestricted file upload
- CVSS 4.4 Medium
Modern Events Calendar lite < 7.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
- webnus/ Modern Events Calendar Lite
- Cross-site scripting (XSS)
-
Webnus Modern Events Calendar Lite: Cross-site scripting vulnerability in Modern Events Calendar Lite versions prior to 6.3.0…
- Webnus Modern Events Calendar Lite