Input validation vulnerability in Community Events 1.5.4

The Community Events plugin for WordPress has a security issue where a malicious user can add their own code to existing code and access sensitive information. This vulnerability is present in all versions up to 1.5.4 and is caused by inadequate protection of user input and a lack of preparation in the SQL query. This means that anyone, even without an account, can potentially access private information from the database.

Detected in:

Community Events fixed vulnerable versions: >= * <= 1.5.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.