Eventer vulnerabilities

2 known vulnerabilities in Eventer from Joe007. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Eventer: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2026-9700Jul 8, 2026Joe007

  The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL q

• 9.8 Critical severity

  Eventer: Authentication Bypass by Alternate Name

  CVE-2026-9701Jul 8, 2026Joe007

  The Eventer plugin for WordPress is vulnerable to an insecure password reset mechanism in all versions up to, and including, 4.4.2. The plugin stores a plaintext copy of the password reset key in the `eventer_verification_code` user meta field when a user requ