CVE-2025-10587

The CVE affects the WordPress Community Events plugin. The vulnerability is an SQL Injection in the event_category parameter present in all versions up to and including 1.5.1, caused by insufficient escaping and inadequate preparation of the SQL query. This allows authenticated attackers with Sub...