CVE-2021-4458 | Modern Events Calendar Lite Plugin up to 6.3.0 on WordPress wp_ajax_mec_load_single_page ID sql injection

A vulnerability was found in Modern Events Calendar Lite Plugin up to 6.3.0 on WordPress. It has been classified as critical. Affected is the function wp_ajax_mec_load_single_page. The manipulation of the argument ID leads to sql injection.

This vulnerability is traded as CVE-2021-4458. It is possible to launch the attack remotely. There is no exploit available.