WordPress CVEs

Description

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

Affected WordPress components

• eventr Plugin · eventr
  Confirmed match Homeless
  From unspecified (including) to 1.02.2 (excluding); Version 1.02.2
  View on WordPress.org

A confirmed match is backed by the plugin or theme slug. A possible match is based on the product name only and should be verified.

Affected products and versions

• Binny V A eventr — From unspecified (including) to 1.02.2 (excluding)
• eventr_project eventr — Version 1.02.2

References

• www.vapidlabs.com http://www.vapidlabs.com/advisory.php?v=192 Exploit, Third Party Advisory
• wordpress.org https://wordpress.org/plugins/eventr/ Third Party Advisory
• nvd.nist.gov Official NVD record