CVE-2026-32583: WordPress Modern Events Calendar plugin <= 7.29.0 - Broken Access Control vulnerability
Published Mar 16, 2026
·Updated
Missing Authorization vulnerability in Webnus Inc. Modern Events Calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Modern Events Calendar: from n/a through 7.29.0.
Affected Software
2 affected components
Webnus Modern Events Calendar<=7.29.0
wordpress/modern-events-calendar<=7.29.0
Event History
Mar 16, 2026
CVE Published
via MITRE·03:11 PM
Data Sourced
via MITRE·03:11 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Oct 8, 58191
Event
via FIRST·10:09 PM
Frequently Asked Questions
1
What is the severity of CVE-2026-32583?
CVE-2026-32583 is classified as a high severity vulnerability due to its potential for unauthorized access.
2
How do I fix CVE-2026-32583?
To fix CVE-2026-32583, update the Modern Events Calendar plugin to version 7.30.0 or later.
3
What versions of Modern Events Calendar are affected by CVE-2026-32583?
CVE-2026-32583 affects all versions of Modern Events Calendar from n/a up to and including 7.29.0.
4
What type of vulnerability is CVE-2026-32583?
CVE-2026-32583 is a Broken Access Control vulnerability that allows unauthorized actions due to missing authorization checks.
5
Who is the vendor for the product affected by CVE-2026-32583?
The vendor for the affected product, Modern Events Calendar, is Webnus Inc.