What is GHSA-4723-cp2j-hhv7?

GHSA-4723-cp2j-hhv7 is a security advisory published by GitHub Security Advisories with High severity. The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro...

Which CVE IDs does GHSA-4723-cp2j-hhv7 cover?

GHSA-4723-cp2j-hhv7 covers the following CVE IDs: CVE-2026-96534. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4723-cp2j-hhv7?

GHSA-4723-cp2j-hhv7 has a CVSS v3 base score of 7.7, published by GitHub Security Advisories.

GHSA-4723-cp2j-hhv7HighCVSS 7.7

The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro...

Vendor

GitHub Security Advisories

Published

October 18, 2026

Last Modified

October 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-96534 →

📋 Description

The Modern Events Calendar Lite WordPress plugin before 7.37.0, Modern Event Calendar Pro WordPress plugin before 7.37.0 does not sanitise and escape a parameter before using it in a SQL statement, allowing authenticated users with minimal privileges (Subscriber and above) to perform SQL injection attacks.

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2026-96534
https://wpscan.com/vulnerability/8c2f8229-1222-49e7-a17f-ef0852f4c805
https://github.com/advisories/GHSA-4723-cp2j-hhv7