Lucene search
+L

8641 matches found

CVE
CVE
added 2025/10/09 1:48 a.m.30 views

CVE-2025-10586

Summary: CVE-2025-10586 affects the WordPress Plugin “Community Events.” The vulnerability is a SQL injection in the event_venue parameter for versions up to and including 1.5.1, caused by insufficient escaping of user input and inadequate preparation of the SQL query. Impact: Authenticated attac...

9.8CVSS6.2AI score0.00468EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/10/09 1:48 a.m.17 views

CVE-2025-10586 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘eventvenue’ parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS0.00468EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/10/09 1:48 a.m.3 views

CVE-2025-10586 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the ‘eventvenue’ parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS6.2AI score0.00468EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.7 views

WordPress plugin Community Events SQL注入漏洞

The WordPress Community Events plugin is a plugin that allows users to publish event information independently through a website form, while administrators can retain the right to final review of calendar content. WordPress Community Events plugin suffers from a SQL injection vulnerability that...

9.8CVSS7.6AI score0.00468EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2025/10/09 12:0 a.m.8 views

PT-2025-41329

Name of the Vulnerable Software and Affected Versions WordPress Community Events plugin versions through 1.5.1 Description The WordPress Community Events plugin is susceptible to a SQL Injection issue due to inadequate input sanitization of the event venue parameter. This allows authenticated...

9.8CVSS7.4AI score0.00468EPSS
SaveExploits0References12
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.22 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. in the United States, with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE and EE...

7.5CVSS6.7AI score0.00496EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2025/10/09 12:0 a.m.6 views

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE and EE versions 5.2 up to and...

6.5CVSS6.6AI score0.00495EPSS
SaveExploits0References5
NVD
NVD
added 2025/10/08 4:16 a.m.16 views

CVE-2025-10587

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS0.00366EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2025/10/08 3:31 a.m.4 views

CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS6.2AI score0.00366EPSS
SaveExploits1References4
CVE
CVE
added 2025/10/08 3:31 a.m.28 views

CVE-2025-10587

The CVE affects the WordPress Community Events plugin. The vulnerability is an SQL Injection in the event_category parameter present in all versions up to and including 1.5.1, caused by insufficient escaping and inadequate preparation of the SQL query. This allows authenticated attackers with Sub...

9.8CVSS6.2AI score0.00366EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2025/10/08 3:31 a.m.14 views

CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS0.00366EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2025/10/08 12:0 a.m.8 views

WordPress plugin Community Events SQL注入漏洞

WordPress Community Events plugin is a plugin that allows users to submit events. Users can publish event information independently through the website form, while the administrator can retain the final right to review the calendar content. A SQL injection vulnerability exists in the WordPress...

9.8CVSS7.3AI score0.00366EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.11 views

PT-2025-41220

Name of the Vulnerable Software and Affected Versions Community Events plugin for WordPress versions up to and including 1.5.1 Description The Community Events plugin for WordPress is susceptible to SQL Injection through the event category parameter. Insufficient input sanitization and inadequate...

9.8CVSS6.7AI score0.00366EPSS
SaveExploits1References15
Patchstack
Patchstack
added 2025/10/07 10:30 p.m.8 views

WordPress Community Events plugin <= 1.5.1 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by ifoundbug in WordPress Plugin Community Events versions = 1.5.1...

9.8CVSS7.8AI score0.00366EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-8197

Malware in sbrugna...

4.3CVSS4.6AI score0.00658EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2019-18553

Malware in sbrugna...

5.3CVSS5.7AI score0.01458EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2019-18479

Malware in sbrugna...

6.1CVSS6.3AI score0.00822EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2004-0634

Malware in sbrugna...

5CVSS6AI score0.05275EPSS
SaveExploits0References18
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2020-21845

Malware in sbrugna...

4.8CVSS5.2AI score0.01082EPSS
SaveExploits3References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2018-6746

Malware in sbrugna...

6.5CVSS6.6AI score0.01183EPSS
SaveExploits0References2
Rows per page
Query Builder