Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in EventON 2.1.7

  • Severity: low-risk
  • Status: Fixed
  • Publication: November 9, 2023

The EventON plugin for WordPress is not secure and can be easily hacked through the admin settings. This can happen in all versions up to 2.1.7. The plugin does not properly clean up the inputs and outputs, which allows attackers with administrator access to insert their own code into pages. This can only happen in multi-site installations or if the option to filter out HTML has been turned off.

Detected in:

EventON fixed vulnerable versions:
EventON – Events Calendar fixed vulnerable versions:

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.