Hello,
the MEC (Modern Events Calendar) included in the Pro Bundle is currently outdated; there is a known, unpatched security vulnerability (SQL injection, CVE-2026-11349, CVSS 8.6) that was only fixed in version 7.34.0. What is the status on this? Could you please update the bundle soon? Details: https://www.ionix.io/threat-center/cve-2026-11349/
Thanks!
Hannes
Hello Hannes,
Thanks for writing to us.
The latest version of the MEC plugin currently supported by our products is 7.30.0. Our development team is still testing version 7.35.1 to ensure compatibility and identify any potential conflicts. Once testing is complete and the version has been confirmed to be stable, it will be made available through the Themeco plugin repository.
Thank you for your patience and understanding.
Hello Hannes,
Sorry for the confusion. The latest version of the MEC plugin currently supported by our products is 7.35.1, and it is available in the Themeco plugin repository. You can update the plugin directly from your WordPress dashboard. If the update does not work, please try deactivating the plugin first and then updating it. Alternatively, you can deactivate and delete the MEC plugin, then reinstall it by navigating to X/Pro → Extensions → Modern Events Calendar → Install . Before updating or deleting the plugin, please make sure to create a complete backup of your website files and database.
Thanks
Thank you. It worked.