1. WPScan Online
  2. Latest Updates and Insights on WordPress Security
  3. Critical SQL Injection Vulnerability Discovered in ‘The Events Calendar’ WordPress Plugin

Critical SQL Injection Vulnerability Discovered in ‘The Events Calendar’ WordPress Plugin

26 September 2024
A critical SQL injection vulnerability has been discovered in The Events Calendar WordPress plugin (CVE-2024-8275), affecting all versions up to 6. 6. 4. The vulnerability has a CVSS score of 9. 8, indicating a high level of severity.

>>More