WordPress CVEs

Description

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

Affected WordPress components

• eventr Plugin · eventr
  Confirmed match Homeless
  From unspecified (including) to 1.02.2 (excluding); Version 1.02.2
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• Binny V A eventr — From unspecified (including) to 1.02.2 (excluding)
• eventr_project eventr — Version 1.02.2

References

• www.vapidlabs.com http://www.vapidlabs.com/advisory.php?v=192 Exploit, Third Party Advisory
• wordpress.org https://wordpress.org/plugins/eventr/ Third Party Advisory
• nvd.nist.gov Official NVD record