CyberSecBulletin

Joe007 vulnerabilities

We track 2 vulnerabilities in Joe007 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2026.

2vulnerabilities
1critical
1high
0exploited
8.7average CVSS score

Latest Joe007 vulnerabilities

  • 7.5 High severity

    Eventer: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2026-9700Joe007

    The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL q

  • 9.8 Critical severity

    Eventer: Authentication Bypass by Alternate Name

    CVE-2026-9701Joe007

    The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2. The plugin stores a plaintext copy of the password reset key in the `eventer_verification_code` user meta field when a user requ