Modern Events Calendar

Modern Events Calendar has 4 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; all 4 are fixed as of September 2026. Their average CVSS score is 7.5, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 3 high. 2026 was the busiest year with 2 disclosures.

The most common weakness is Missing Authorization, behind 1 of the records (25%). Other recurring categories include Server-Side Request Forgery (SSRF), SQL Injection.

Every one of the 4 issues recorded for Modern Events Calendar has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Foxyyy.

Strategic Overview

Avg CVSSHigh

7.5/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Modern Events Calendar vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2024-5441

Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload

Read the full analysis

Vulnerability Records

4 records


2026-08-17 12:49	Modern Events Calendar < 7.35.0 - Unauthenticated SQL Injection Modern Events Calendar < 7.35.0	`CVE-2026-73339`	7.5 High	VanTastic	Yes
2026-03-16 00:00	Modern Events Calendar <= 7.32.0 - Missing Authorization Modern Events Calendar <= 7.32.0	`CVE-2026-32583`	5.3 Medium	Aman Rawat	Yes
2024-08-06 21:57	Modern Events Calendar <= 7.12.1 - Authenticated (Subscriber+) Server Side Request Forgery Modern Events Calendar <= 7.12.1	`CVE-2024-6522`	8.5 High	Foxyyy	Yes
2024-07-08 00:00	Modern Events Calendar <= 7.11.0 - Authenticated (Subscriber+) Arbitrary File Upload Modern Events Calendar <= 7.11.0	`CVE-2024-5441`	8.8 High	Foxyyy	Yes

Showing 1–4 of 4 reports