CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110069
MEDIUMCVSS 4.3NVD feed
Published 18 October 2026 · tracked since 18 October 2026
Description
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment amounts
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110886 CRITICAL 9.8
- CVE-2026-107436 HIGH 8.8
- CVE-2026-87844 MEDIUM 5.3
- CVE-2026-96534 HIGH 7.7
- CVE-2026-111877 MEDIUM 4.3
- CVE-2026-111942 MEDIUM 4.3
- CVE-2026-110031 HIGH 7.2
- CVE-2026-110032 MEDIUM 5.5
- CVE-2026-110033 MEDIUM 6.8
- CVE-2026-110035 MEDIUM 4.3