https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T14:33:14.829931+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-24946 CVE-2021-24946 — Modern Events Calendar < 6.1.5 - Unauthenticated Blind SQL Injection 2026-10-06T14:33:14.845840+00:00

Affected: Unknown Modern Events Calendar Lite

The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue