← WordPress Vulnerabilities
WordPress security by component

Wp Events Calendar

Wp Events Calendar is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jan 12, 2018; the highest CVE/CNA score is 9.8.

Plugin slug: wp-events-calendar

CVE-2018-5315: Wp Events Calendar: SQL injection

Wp Events Calendar is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.

PublishedJan 12, 2018
Safe version guidanceSee mitigation notes
Safe version
Jan 12, 2018 CVE-2018-5315
Wp Events Calendar: SQL injection
Wp Events Calendar is affected by SQL injection. Exposure depends on how the affected operation is made reachable by the site. A successful request can alter database queries and expose or modify WordPress data.
See mitigation notes
CVE9.8
NVD9.8