← WordPress Vulnerabilities
WordPress security by component

Event Espresso Lite

Event Espresso Lite provides event registration and attendee management features for WordPress websites.

Event Espresso Lite (event-espresso-lite) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Sep 27, 2017; the highest published CVSS base score is 9.8.

Plugin slug: event-espresso-lite

CVE-2017-14760: Event Espresso Lite: SQL injection

Event Espresso Lite is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedSep 27, 2017
Safe version guidanceSee mitigation notes
Published vulnerabilities for event-espresso-lite
Safe version
Sep 27, 2017 CVE-2017-14760
Event Espresso Lite: SQL injection
Event Espresso Lite is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVEPending