CVE Catalog

CVE-2026-73339

CriticalCVSS 9.3
Published: Translated: NVD NIST

Summary

An unauthenticated attacker can exploit SQL Injection in Modern Events Calendar versions prior to 7.35.0.

Risk Assessment

Exposure of database data, data modification, or privilege escalation.

Recommendation

Update the Modern Events Calendar plugin to version 7.35.0 or later.

Original NVD description (English source)

Unauthenticated SQL Injection in Modern Events Calendar < 7.35.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS