Lucene search
K

9 matches found

CNVD
CNVD
added 2025/10/13 12:0 a.m.5 views

WordPress Community Events plugin SQL Injection Vulnerability

WordPress Community Events plugin is a plugin that allows users to submit events. Users can publish event information independently through the website form, while the administrator can retain the final right to review the calendar content. A SQL injection vulnerability exists in the WordPress...

9.8CVSS7.7AI score0.0005EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/09 4:13 a.m.2 views

CVE-2025-10587

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS6.6AI score0.0005EPSS
Exploits0References1
NVD
NVD
added 2025/10/08 4:16 a.m.3 views

CVE-2025-10587

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS0.0005EPSS
Exploits0References4
Cvelist
Cvelist
added 2025/10/08 3:31 a.m.4 views

CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS0.0005EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/10/08 3:31 a.m.2 views

CVE-2025-10587 Community Events <= 1.5.1 - Unauthenticated SQL Injection

The Community Events plugin for WordPress is vulnerable to SQL Injection via the eventcategory parameter in all versions up to, and including, 1.5.1 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

9.8CVSS6.2AI score0.0005EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/08 12:0 a.m.3 views

PT-2025-41220

Name of the Vulnerable Software and Affected Versions Community Events plugin for WordPress versions up to and including 1.5.1 Description The Community Events plugin for WordPress is susceptible to SQL Injection through the event category parameter. Insufficient input sanitization and inadequate...

9.8CVSS6.7AI score0.0005EPSS
Exploits0References15
Positive Technologies
Positive Technologies
added 2024/06/12 12:0 a.m.3 views

PT-2024-26249 · WordPress · The Events Manager

Name of the Vulnerable Software and Affected Versions: The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress versions up to, and including, 6.4.7.3 Description: The issue is related to Stored Cross-Site Scripting via the plugin's 'event', 'location', and 'event category...

6.4CVSS6.1AI score0.0031EPSS
Exploits0References6
OSV
OSV
added 2017/09/14 1:29 p.m.0 views

CVE-2017-1002026

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function editeventcategory does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement...

8.8CVSS5.8AI score0.00874EPSS
Exploits1References2
Citrix
Citrix
added 2017/04/27 12:0 a.m.5 views

How to View NetScaler SNMP Trap Details on NetScaler MAS

This article describes how to view NetScaler SNMP trap details on NetScaler MAS. Background You can now view the details of each SNMP trap received from NetScaler instances to the NetScaler MAS server on the Event Settings page. For a specific trap received from your instance, you can view the...

6.9AI score
Exploits0
Rows per page
Query Builder