Modern Events Calendar Lite

Modern Events Calendar Lite Security Releases - October 2026

modern-events-calendar-lite-2026-10 Oct 1, 2026 Source: Vendor

Modern Events Calendar Lite security advisories for October 2026, compiled from CVE.org records.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://www.cve.org/CVERecord?id=CVE-2026-110069

Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

2 lines

Showing 1–2 of 2

CVE-2026-110069 BR2026-0000-037229 Modern Events Calendar Lite unclaimed

The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated u...

Credited as Usama Arshad

CVE-2026-110070 BR2026-0000-037230 Modern Events Calendar Lite unclaimed

The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber...

Credited as Nguyen Duc Thinh