Description
WordPress Plugin Modern Events Calendar Lite is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently modify plugin's settings. WordPress Plugin Modern Events Calendar Lite version 5.1.6 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 5.1.8 or latest
References
Related Vulnerabilities
Team Members Cross-Site Scripting (5.2.0)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-2243)
WP Favorite Posts Cross-Site Scripting (1.6.5)
Countdown and CountUp, WooCommerce Sales Timer Cross-Site Request Forgery (1.5.7)
WP-Property-WordPress Powered Real Estate and Property Management Arbitrary File Upload (1.35.0)