Input validation vulnerability in Event Manager and Tickets Selling Plugin for WooCommerce – WpEvently – WordPress Plugin 4.1.1

A popular plugin for selling tickets and managing events on WordPress, called WpEvently, has a security vulnerability that could allow hackers to inject harmful code. This can happen if the plugin receives untrusted information, which could then be used to delete files, access private information, or run malicious code. The vulnerability affects all versions of the plugin, up to and including version 4.1.1. This means that anyone with contributor-level access or higher could potentially exploit this vulnerability.