Skip to content

Vendor

eventr project vulnerabilities

2 published CVES affecting eventr project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
2
High
0
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of eventr project alerts

Products

Latest eventr project CVEs

Newest publication first

  1. CVE-2017-1002019 Eventr <= 1.02.2 - SQL Injection

    Published
    CriticalCVSS 9.8 EPSS 2.5%

    Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

  2. CVE-2017-1002018 eventr <= 1.02.2 - SQL Injection

    Published
    CriticalCVSS 9.8 EPSS 2.5%

    Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.