Modern Event Calender - Security Issue

Support
#1

Hello,

with Theme X in Version 7.2.0 it is possible to update the plugin “Modern Event Calender” to version 5.1.6. There is a security problem with this and lower versions (https://www.wordfence.com/blog/2020/02/site-takeover-campaign-exploits-multiple-zero-day-vulnerabilities/). A fix was provided with version 5.1.7 and there is also a new version 5.1.8. I am not able to update the plugin to version 5.1.7 or 5.1.8. In the wordpress backend a message is displayed:

Beim Aktualisieren von Moderner Event Kalender ist ein Fehler aufgetreten: Aktualisierungs-Paket nicht verfügbar.

In english:
An error has to be changed when updating the modern event calendar: Update package not available.

Can you provide the fixed version for security reasons?

Best regards
Heiko

#2

HI Heiko,

I can confirm current compatible version is MEC version 5.1.6. I have created a request for the update on version with available fixed. Update package not available error happens because the latest version is not yet available. Usually we do compatibility testing first before we update the plugin. Please do bear with us because the fixed was just released by the plugin developer yesterday March 3. Rest assured that it was forwarded to our developer. Thank you for understanding.

#4

This topic was automatically closed 10 days after the last reply. New replies are no longer allowed.