CVE-2020-9459

Multiple Stored Cross-site scripting (XSS) vulnerabilities in the Webnus Modern Events Calendar Lite plugin through 5.1.6 for WordPress allows remote authenticated users (with minimal permissions) to inject arbitrary JavaScript, HTML, or CSS via Ajax actions. This affects mec_save_notifications and import_settings.

• CWE-79

• https://wpvulndb.com/vulnerabilities/10100Exploit, Third Party Advisory
• https://www.wordfence.com/blog/2020/02/site-takeover-campaign-exploits-multiple-zero-day-vulnerabilities/Exploit, Third Party Advisory
• https://wpvulndb.com/vulnerabilities/10100Exploit, Third Party Advisory
• https://www.wordfence.com/blog/2020/02/site-takeover-campaign-exploits-multiple-zero-day-vulnerabilities/Exploit, Third Party Advisory

Published

Feb 28, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-9453In Epson iProjection v2.30, the driver file EMP_MPAU.sys all…5.5
• CVE-2020-9454A CSRF vulnerability in the RegistrationMagic plugin through…8.8
• CVE-2020-9455The RegistrationMagic plugin through 4.6.0.3 for WordPress a…4.3
• CVE-2020-9456In the RegistrationMagic plugin through 4.6.0.3 for WordPres…8.8
• CVE-2020-9457The RegistrationMagic plugin through 4.6.0.3 for WordPress a…8.8
• CVE-2020-9458In the RegistrationMagic plugin through 4.6.0.3 for WordPres…8.8
• CVE-2020-9460Octech Oempro 4.7 through 4.11 allow XSS by an authenticated…5.4
• CVE-2020-9461Octech Oempro 4.7 through 4.11 allow stored XSS by an authen…5.4
• CVE-2020-9462An issue was discovered in all Athom Homey and Homey Pro dev…4.3
• CVE-2020-9463Centreon 19.10 allows remote authenticated users to execute …8.8
• CVE-2020-9464A Denial-of-Service vulnerability exists in BECKHOFF Etherne…7.5
• CVE-2020-9465An issue was discovered in EyesOfNetwork eonweb 5.1 through …9.8