CVE-2026-110070: Modern Events Calendar Lite 0 to before 7.36.4

Affected technology

Modern Events Calendar Lite · 0 to before 7.36.4
Vendor not specified by the source

Description’s affected range: before 7.36.4 does not verify that a user is authorized to edit the target post before updating it

Component: Not specified by the source

What an attacker can do

Authenticated users with the Subscriber role can modify the title, content, and excerpt of arbitrary posts, pages, and custom post types created by other users.