1339 matches found
EUVD-2026-107049
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter before using it in a SQL statement, which allows authenticated users with Subscriber-level access and above to append additional SQL...
PT-2026-120444
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 do not sanitise and escape a parameter before using it in a SQL statement, which allows authenticated users with Subscriber-level access and above to append additional SQL...
frida-ios-dump-modern
Modern iOS IPA Dumper A modern iOS application memory decryption tool built for Frida 17.5.2+ with full support for iOS 14-16 and multiple jailbreaks. Status: ✅ Working and Tested - Successfully dumps and decrypts iOS apps using Frida 17.5.2 on: iOS 14.7.1 + Taurine jailbreak iPad mini 5 iOS...
WordPress Modern Event Calendar Pro plugin < 7.37.0 - Subscriber+ SQLi vulnerability
Subscriber+ SQLi vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Modern Events Calendar versions 7.37.0...
WordPress Modern Events Calendar Lite plugin < 7.37.0 - Subscriber+ SQLi vulnerability
Subscriber+ SQLi vulnerability discovered by Sanjar Tulkinov in WordPress Plugin Modern Events Calendar Lite versions 7.37.0...
CVE-2025-7461
CVE-2025-7461: SQL Injection Vulnerability Analysis in Modern Bag E-commerce System 🌐 Language / 语言 : English | 简体中文 Vulnerability Overview Vulnerability Database: https://vuldb.com/?id.316112 Project Source: https://code-projects.org/modern-bag-in-php-css-javascript-and-mysql-free-download/ Item...
cryptovenom
CryptoVenom CryptoVenom: The Cryptography Swiss Army knife What is CryptoVenom? CryptoVenom is an OpenSource tool which contains a lot of cryptosystems and cryptoanalysis methods all in one, including classical algorithms, hash algorithms, encoding algorithms, logic gates, mathematical functions,...
CVE-2021-24145
CVE-2021-24145 WordPress File Upload Vulnerability, Modern Events Calendar Lite WordPress plugin before 5.16.5 https://nvd.nist.gov/vuln/detail/CVE-2021-24145 Installation and Execution Steps 1. WordPress Installation When proceeding with installation, please perform port forwarding in the...
Vision-MSI-Thermal-Control
Vision MSI Thermal Control MSI Modern 15H AI C1MG-096IT Linux thermal management - Reverse engineered EC control with fan profiles and battery threshold 🎯 Purpose of this Project This application was born out of necessity for MSI laptop users on Linux. The journey began when I discovered that...
CVE-2026-96534
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges Subscriber and above to perform SQL injection...
CVE-2026-110069
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...
CVE-2026-110070
The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber role to modify the title, content, and excerpt of arbitrary posts, pages, and custom post types...
CVE-2026-96534
The Modern Events Calendar Lite and Modern Event Calendar Pro WordPress plugins, in versions prior to 7.37.0 , are vulnerable to SQL injection . The flaw occurs because the software fails to properly sanitise and escape a parameter before including it in a SQL statement, specifically via the mec_...
CVE-2026-96534 Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges Subscriber and above to perform SQL injection...
EUVD-2026-103401
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges Subscriber and above to perform SQL injection...
CVE-2026-96534 Modern Events Calendar (Lite & Pro) < 7.37.0 - Subscriber+ SQLi via mec_fes_csv_export
The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges Subscriber and above to perform SQL injection...
CVE-2026-110069 Modern Events Calendar Lite < 7.37.0 - Subscriber+ Sensitive Data Disclosure via mec_event_bookings and mec_attendees AJAX Actions
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...
EUVD-2026-103396
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment...
CVE-2026-110070
The Modern Events Calendar Lite WordPress plugin version before 7.36.4 contains an authorization bypass (IDOR) vulnerability. The plugin fails to verify if a user is authorized to edit a target post before processing an update. This allows authenticated users with the Subscriber role to modify th...
EUVD-2026-103397
The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber role to modify the title, content, and excerpt of arbitrary posts, pages, and custom post types...