CVSS v3
9.8
CRITICAL
EPSS Score
60.1%
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue
The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users, leading to an unauthenticated SQL injection issue
Active exploitation of CVE-2021-24946 has not been confirmed. The EPSS score is 60.1%, indicating the estimated probability of exploitation in the next 30 days.
CVE-2021-24946 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
Ranked by exploit probability (EPSS).