CVE-2026-105067

8.5 HIGH

Published 2026-10-14 · Updated 2026-10-15

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Webnus Modern Events Calendar Lite modern-events-calendar-lite allows Blind SQL Injection.This issue affects Modern Events Calendar Lite: from n/a before 7.37.0.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:L

Weaknesses

CWE-89

All references

https://patchstack.com/database/wordpress/plugin/modern-events-calendar-lite/vulnerability/wordpress-modern-events-calendar-lite-plugin-7-37-0-sql-injection-vulnerability?_s_id=cve

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2015-20122
HIGHCVE-2019-25776PoC
HIGHCVE-2021-48008
HIGHCVE-2022-4997
CRITICALCVE-2023-54399
CRITICALCVE-2023-54400PoC
HIGHCVE-2025-45871PoC
HIGHCVE-2025-46773

Related by shared AI tags and CWE weakness class. Browse the full archive.