CVE-2017-1002018: Eventr Project Eventr

Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days.

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

Affected products

• Eventr Project Eventr: version 1.02.2 only

Published 2017-09-14. Last modified 2026-06-17.