WordPress Events Manager 漏洞列表

共找到 2 个与 WordPress Events Manager 相关的漏洞

📅 加载漏洞趋势中...

WordPress Events Manager <= 7.0.3 SQL注入漏洞(CVE-2025-6970) 无POC

日期: 2025-08-21 | 影响软件: WordPress Events Manager

WordPress Events Manager <= 7.0.3及之前版本存在SQL注入漏洞，攻击者可利用此漏洞获取数据库中敏感信息。
CVE-2025-6970: WordPress Events Manager <= 7.0.3 - SQL Injection POC

日期: 2025-08-01 | 影响软件: WordPress Events Manager

The Events Manager - Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.