Vulnerability found in Eventer – WordPress Event & Booking Manager Plugin

The Eventer plugin for WordPress, used for managing events and bookings, has a security vulnerability that allows hackers to access sensitive information through the reg_id parameter. This is because the plugin does not properly protect the user input and the existing SQL query. This means that attackers with Subscriber-level access or higher can insert their own SQL queries and retrieve private data from the database.