CVE WATCH / VULNERABILITY DETAIL
CVE-2026-110070
MEDIUMCVSS 6.5NVD feed
Published 18 October 2026 · tracked since 18 October 2026
Description
The Modern Events Calendar Lite WordPress plugin before 7.36.4 does not verify that a user is authorized to edit the target post before updating it, allowing authenticated users with the Subscriber role to modify the title, content, and excerpt of arbitrary posts, pages, and custom post types create
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-110886 CRITICAL 9.8
- CVE-2026-107436 HIGH 8.8
- CVE-2026-87844 MEDIUM 5.3
- CVE-2026-96534 HIGH 7.7
- CVE-2026-111877 MEDIUM 4.3
- CVE-2026-111942 MEDIUM 4.3
- CVE-2026-110031 HIGH 7.2
- CVE-2026-110032 MEDIUM 5.5
- CVE-2026-110033 MEDIUM 6.8
- CVE-2026-110035 MEDIUM 4.3