Veille CVE

Dimanche 18 octobre 2026

1 CVE

  1. CVE-2026-96534 7.7 Élevée

    Unknown Modern Events Calendar Lite · Unknown Modern Event Calendar Pro

    The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges (Subscriber and above) to perform SQL injection attacks.