CVE-2026-110069

Name of the Vulnerable Software and Affected Versions Modern Events Calendar Lite versions prior to 7.37.0

Description Insufficient capability, nonce, or ownership checks occur before the return of event booking and attendee data. This allows any authenticated user, such as those with Subscriber roles, to disclose sensitive information including names, email addresses, transaction IDs, and payment amounts for all bookings on the site.

Recommendations Update to version 7.37.0 or later.