CVE-2026-96534

{
  "etk_id": "ETK-2026-2148",
  "cve_id": "CVE-2026-96534",
  "display_id": "CVE-2026-96534",
  "ghsa_id": "GHSA-4723-cp2j-hhv7",
  "euvd_id": "EUVD-2026-103401",
  "status": "published",
  "anchor_state": "anchored",
  "title": "SQL injection in Modern Events Calendar Lite and Pro",
  "summary": "Modern Events Calendar Lite and Modern Event Calendar Pro versions earlier than 7.37.0 are affected by SQL injection. An authenticated WordPress user with Subscriber privileges or higher may be able to influence database queries.",
  "mitigation": "Upgrade Modern Events Calendar Lite and Modern Event Calendar Pro to version 7.37.0 or later. Restrict Subscriber-level accounts to trusted users until upgrades are complete.",
  "vendor": null,
  "product": "Modern Events Calendar Lite",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 7.37.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "7.37.0"
      ],
      "package_name": "Modern Events Calendar Lite",
      "purl": null
    },
    {
      "affected_notes": [],
      "affected_ranges": [
        ">= 0, < 7.37.0"
      ],
      "ecosystem": null,
      "fixed_versions": [
        "7.37.0"
      ],
      "package_name": "Modern Event Calendar Pro",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.7,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N",
  "epss_score": 0.0022,
  "epss_percentile": 0.1125,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "upstream",
  "exploit": false,
  "pipeline_minutes": 0.010058966666666667,
  "t0_at": "2026-10-18T06:00:17.293000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-20T09:17:32.816511+00:00",
      "days": 2.136985225821759,
      "is_lower_bound": false,
      "measured_at": "2026-10-18T06:00:17.293000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-18T06:00:17.293000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-18T06:00:17.293000+00:00",
      "url": "https://github.com/advisories/GHSA-4723-cp2j-hhv7"
    }
  }
}