Threats tagged 'ghsa-mrqj-5x6c-fvcx'

The Events Calendar plugin for WordPress versions 6.15.1.1 through 6.15.9 contains a blind SQL Injection vulnerability via the 's' parameter. This flaw allows unauthenticated attackers to inject additional SQL queries due to insufficient escaping and lack of proper query preparation, potentially enabling extraction of sensitive database information.