WordPress security by component

EventON (Pro) - WordPress Virtual Event Calendar Plugin

Plugin description

EventON (Pro) - WordPress Virtual Event Calendar Plugin is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 30, 2026; the highest CVE/CNA score is 9.8.

Plugin slug: eventon-wordpress-virtual-event-calendar-plugin

Latest vulnerability

CVE-2026-9711: EventON (Pro) - WordPress Virtual Event Calendar Plugin: SQL injection

EventON (Pro) - WordPress Virtual Event Calendar Plugin is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 5.0.11.

PublishedJun 30, 2026

Known safe version> 5.0.11

		Safe version
Jun 30, 2026	CVE-2026-9711 EventON (Pro) - WordPress Virtual Event Calendar Plugin: SQL injection EventON (Pro) - WordPress Virtual Event Calendar Plugin is affected by SQL injection. The vulnerable path is reachable without authentication. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 5.0.11.	> 5.0.11	CVE9.8 NVDPending