PatchTheCVEmodern events calendar vulnerabilities and fixes
Recent CVEs affecting modern events calendar, with upgrade or downgrade steps. 2 tracked.
Also searched as: moderneventscalendar.
modern events calendar has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-08-07. Highest priority: CVE-2024-5441 (score 47/100).
- CVE-2024-6522 HIGH 8.5 UPGRADE UPGRADE The Modern Events Calendar plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions u
- CVE-2024-5441 HIGH 8.8 UPGRADE UPGRADE The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file ty
FAQ
How do I fix modern events calendar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is modern events calendar being exploited right now?
None of the tracked modern events calendar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which modern events calendar CVE should I patch first?
CVE-2024-5441 currently ranks highest (47/100): The Modern Events Calendar plugin for WordPress is vulnerable to arbitrary file uploads due to missing file ty.