CVE-2018-5315 WP Events Calendar Plugin <= 1.0 - SQL Injection
CriticalCVSS 9.8
EPSS 4.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the event_id parameter to event.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress events(WordPress) | < 1.1 | 1.1 |
| wp events calendar project wp events calendar | = 1.0 | No fix listed |
References
- Wordfence Intelligence third-party-advisory
- www.cve.org
- packetstormsecurity.com third-party-advisory vdb-entry
- 43479 exploit third-party-advisory vdb-entry