CVE-2026-93300

The EventON - Subscriber plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.4.5 . The root cause is insufficient escaping of the 'email' parameter and a lack of proper preparation for the existing SQL query. This flaw allows unauthenticated attackers to appe...