CVE Catalog
CVE-2025-69135
HighCVSS 8.5Summary
Subscriber SQL Injection vulnerability in WordPress Events Calendar Plugin versions <= 2.7.2 allows attackers to manipulate SQL queries.
Risk Assessment
An attacker could gain access to sensitive data in the database, potentially leading to serious security breaches.
Recommendation
It is recommended to update the plugin to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.