CVE-2026-110069
UNKNOWN
NVD
CVSS Score
0
Severity
UNKNOWN
Published
Oct 18, 2026
Vendor
unknown
Description
The Modern Events Calendar Lite WordPress plugin before 7.37.0 does not perform capability, nonce, or ownership checks before returning event booking and attendee data, allowing any authenticated user, including Subscribers, to disclose the names, email addresses, transaction IDs and payment amounts of every booking on the site.