Critical severity9.8NVD Advisory· Published Dec 13, 2021· Updated Jun 17, 2026
CVE-2021-24946
CVE-2021-24946
Description
The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Modern Events Calendar Litedescription
- Range: <6.1.5
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/165742/WordPress-Modern-Events-Calendar-6.1-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- github.com/Hacker5preme/Exploits/tree/main/Wordpress/CVE-2021-24946nvdExploitThird Party Advisory
- wpscan.com/vulnerability/09871847-1d6a-4dfe-8a8c-f2f53ff87445nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.