CVE-2024-39638

Description

References

• patchstack.com/database/vulnerability/registrations-for-the-events-calendar/wordpress-registrations-for-the-events-calendar-plugin-2-12-2-sql-injection-vulnerability · Third Party Advisory

Autres vulnérabilités de registrations for the events calendar

• CVE-2024-10703MOYENNE 6.1The Registrations for the Events Calendar WordPress plugin before 2.13.4 does not sanitise and escape some of its settings, which could all…
• CVE-2024-7982CRITIQUE 9.6The Registrations for the Events Calendar WordPress plugin before 2.12.4 does not sanitise and escape some parameters when accepting event …
• CVE-2021-25083MOYENNE 6.1The Registrations for the Events Calendar WordPress plugin before 2.7.10 does not escape the qtype parameter before outputting it back in an…
• CVE-2021-24943CRITIQUE 9.8The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregiste…
• CVE-2021-24876MOYENNE 6.1The Registrations for the Events Calendar WordPress plugin before 2.7.5 does not escape the v parameter before outputting it back in an attr…