（CVE-2025-6970）The Events Manager插件时间型SQL注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-6970
• https://github.com/RandomRobbieBF/CVE-2025-6970
• https://www.ameeba.com/blog/cve-2025-6970-time-based-sql-injection-vulnerability-in-events-manager-wordpress-plugin/
• https://cve.imfht.com/detail/CVE-2025-6970
• https://avd.aliyun.com/detail?id=AVD-2025-6970
• https://github.com/advisories/GHSA-h9rg-w6pv-pfwm
• https://www.tenable.com/cve/CVE-2025-6970
• https://www.ionix.io/threat-center/cve-2025-6970/
• https://cve.imfht.com/poc_detail/179ca608541b8a560e22da9a2fba6942ad253cb5?lang=en

Related Vulnerabilities

• 旭辰資訊｜SmartIT Desktop Manager - 存在4個漏洞
• 中成科信票务管理系统 /SystemManager/TicketSystem/ReturnTicketPlance.ashx SQL 注入漏洞
• 中成科信票务管理系统 /SystemManager/Planetarium/ReserveTicketManagerPlane.ashx SQL 注入漏洞
• Wordpress Events Calendar插件敏感信息泄露漏洞（CVE-2025-9808）
• PoCCVE-2020-10204: Sonatype Nexus Repository Manager 3 - Remote Code Execution
• PoCccm-detect: Clear-Com Core Configuration Manager Panel - Detect
• 智慧物联网综合服务平台ListFileManager存在目录枚举漏洞
• WP User Manager /profile/admin/about 文件包含漏洞（CVE-2026-9290）
• SteVe /steve/manager/signin 默认口令漏洞
• PoCCVE-2008-2052: Bitrix Site Manager 6.5 - Open Redirect
• PoCCVE-2026-9290: WP User Manager – User Profile Builder & Membership - Local File Inclusion
• WP User Manager /profile/admin/about 本地文件包含漏洞
• 月子会所ERP管理云平台WarningManager sidx参数存在SQL注入漏洞