The Events Calendar Security Vulnerabilities and Issues — The Events Calendar CVE List

Lucene search

TheeventscalendarThe Events Calendar

1 matches found

CVE•added 2024/09/25 5:15 a.m.•89 views

CVE-2024-8275

The The Events Calendar plugin for WordPress is vulnerable to SQL Injection via the 'order' parameter of the 'tribe_has_next_event' function in all versions up to, and including, 6.6.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL...

9.8CVSS9.8AI score0.75005EPSS