https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-08T02:30:21.293082+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-18057 CVE-2026-18057 — Events Manager < 7.4.1 - Subscriber+ Booking Consent Record Tampering via SQL Injection 2026-10-08T02:30:21.309174+00:00

Affected: Unknown Events Manager

The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it in a SQL statement, allowing users with a subscriber account and above to perform SQL injection attacks and tamper with booking consent records belonging to other people.