https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 10:59:06 +0000 https://cve.radiocsirt.org/vuln/cve-2026-11349 <p><strong>Affected:</strong> Unknown Modern Event Calendar Pro, Unknown Modern Events Calendar Lite</p> <p>The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection vulnerability that allows attackers to extract sensitive data from the database.</p> <p><strong>Affected:</strong> Unknown Modern Event Calendar Pro, Unknown Modern Events Calendar Lite</p> <p>The Modern Event Calendar Pro WordPress plugin before 7.34.0, Modern Events Calendar Lite WordPress plugin before 7.34.0 do not sanitise and escape a request parameter before using it in a SQL statement, through an AJAX action available to unauthenticated users, leading to an unauthenticated SQL injection vulnerability that allows attackers to extract sensitive data from the database.</p> https://cve.radiocsirt.org/vuln/cve-2026-11349