CVE-2026-11349

The CVE concerns the Modern Event Calendar plugins for WordPress (Pro and Lite) before version 7.34.0, where an unauthenticated AJAX action uses an unsanitized request parameter in a SQL statement, causing an unauthenticated SQL injection. Root cause: lack of sanitization/escaping of the paramete...