CVE-2025-6970

🗓️ 09 Jul 2025 22:22:46Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 61 Views🌐 WEB

Events Manager plugin for WordPress has a SQL Injection vulnerability affecting versions up to 7.0.3.

Reporter	Title	Published	Views	Family All 15
GithubExploit	Exploit for SQL Injection in Pixelite Events_Manager	9 Jul 202520:44	–	githubexploit
Circl	CVE-2025-6970	10 Jul 202503:00	–	circl
CNNVD	WordPress plugin Events Manager SQL注入漏洞	9 Jul 202500:00	–	cnnvd
CNVD	WordPress Events Manager Plugin SQL Injection Vulnerability	14 Jul 202500:00	–	cnvd
Cvelist	CVE-2025-6970 Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter	9 Jul 202522:22	–	cvelist
EUVD	EUVD-2025-20877	9 Jul 202522:22	–	euvd
Nuclei	WordPress Events Manager <= 7.0.3 - SQL Injection	18 Jun 202612:11	–	nuclei
NVD	CVE-2025-6970	9 Jul 202523:15	–	nvd
OSV	CVE-2025-6970	9 Jul 202523:15	–	osv
Packet Storm	📄 WordPress Events Manager 7.0.3 SQL Injection	10 Jul 202500:00	–	packetstorm

NVD

Vulners

Node

pixelite events_managerRange<6.6.5wordpress

pixelite events_managerRange7.0.1–7.0.4wordpress

[
  {
    "vendor": "netweblogic",
    "product": "Events Manager – Calendar, Bookings, Tickets, and more!",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "6.6.4.4",
        "versionType": "semver"
      },
      {
        "version": "7.0.1",
        "status": "affected",
        "lessThanOrEqual": "7.0.3",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/7320c06e-a7a7-4ed0-93cd-e85d74bae73f
plugins	www.plugins.trac.wordpress.org/browser/events-manager/tags/7.0.3/classes/em-object.php
plugins	www.plugins.trac.wordpress.org/changeset/3321403/events-manager

Parameter	Position	Path	Description	CWE
orderby	request body	/wp-admin/admin-ajax.php	Time-based SQL Injection via the 'orderby' parameter in events-manager AJAX endpoint.	CWE-89

17 Jun 2026 10:02Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.5

EPSS0.55683

SSVC

CWE-89