CVE-2026-73339

An unauthenticated SQL injection vulnerability exists in versions of Modern Events Calendar prior to 7.35.0, allowing attackers to manipulate database queries without authentication. This critical flaw could lead to unauthorized data access, data leakage, or complete system compromise. Organizations using affected versions should prioritize immediate updates to mitigate potential exploitation.