Sploitus

13 exploited vulnerabilities in Modern Events Calendar Lite

Vulnerabilities with publicly known exploits

Vendors
WordPress, Unknown, Webnus
With known exploits
13
Affected Webnus Modern Events Calendar Lite versions
< 6.1.5, 5.16.6, 5.16.5, 6.4.0, 6.2.0, 5.22.3, 6.5.2, 5.22.2

Vulnerabilities with exploits

Highest CVSS first — 11 of these already have exploit code on Sploitus

CVE-2021-24946 6 exploits
CVSS 9.8 CRITICAL 2021-12-13FIX AVAILABLE
WordPress Modern Events Calendar SQL Injection ScannerWordPress Modern Events Calendar SQLi Scanner
CVE-2021-24149 1 exploit
CVSS 8.8 HIGH 2021-03-18FIX AVAILABLE
Modern Events Calendar Lite < 5.16.6 - Authenticated SQL Injection
CVE-2026-11349
CVSS 8.6 HIGH 2026-07-20FIX AVAILABLE
CVE-2021-24146 4 exploits
CVSS 7.5 HIGH 2021-03-18FIX AVAILABLE
Wordpress Plugin Modern Events Calendar 5.16.2 - Event export (Unauthenticated)WordPress Modern Events Calendar 5.16.2 Information Disclosure
CVE-2021-24145 8 exploits
CVSS 7.2 HIGH 2021-03-18FIX AVAILABLE
Exploit for Unrestricted Upload of File with Dangerous Type in Webnus Modern_Events_Calendar_LiteWordPress Modern Events Calendar Remote Code Execution
CVE-2021-24925 1 exploit
CVSS 6.1 MEDIUM 2021-12-13FIX AVAILABLE
Modern Events Calendar Lite < 6.1.5 - Reflected Cross-Site Scripting
CVE-2022-0364 1 exploit
CVSS 5.4 MEDIUM 2022-03-21FIX AVAILABLE
Modern Events Calendar Lite < 6.4.0 - Contributor+ Stored Cross Site Scripting
CVE-2021-25046 1 exploit
CVSS 5.4 MEDIUM 2022-01-17FIX AVAILABLE
Modern Events Calendar Lite < 6.2.0 - Subscriber+ Category Add Leading to Stored XSS
CVE-2021-24716 1 exploit
CVSS 5.4 MEDIUM 2021-11-01FIX AVAILABLE
Modern Events Calendar Lite < 5.22.3 - Authenticated Stored Cross Site Scripting
CVE-2021-24147 1 exploit
CVSS 5.4 MEDIUM 2021-03-18FIX AVAILABLE
Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)
CVE-2020-9459
CVSS 5.4 MEDIUM 2020-02-28
CVE-2023-1400 1 exploit
CVSS 4.8 MEDIUM 2023-03-27FIX AVAILABLE
Modern Events Calendar lite <= 5.16.2 - Admin+ Stored XSS
CVE-2021-24687 1 exploit
CVSS 4.8 MEDIUM 2021-10-04FIX AVAILABLE
Modern Events Calendar Lite < 5.22.2 - Admin+ Stored Cross-Site Scripting