Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/07/12 11:23 a.m.16 views

CVE-2021-4458 Modern Events Calendar Lite <= 6.3.0 - Unauthenticated SQL Injection

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

5.9CVSS0.00354EPSS
SaveExploits0References2
Rows per page
Query Builder