CVE-2018-5315: Wp Events Calendar Project Wp Events Calendar

Critical severity, CVSS 9.8. EPSS: 4.9% chance of exploitation in the next 30 days.

The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the event_id parameter to event.php.

Affected products

• Wp Events Calendar Project Wp Events Calendar: version 1.0 only

Published 2018-01-12. Last modified 2026-06-17.