CVE-2022-1905: E-Dynamics Events Made Easy

Critical severity, CVSS 9.8. EPSS: 37.1% chance of exploitation in the next 30 days.

The Events Made Easy WordPress plugin before 2.2.81 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection

Affected products

• E-Dynamics Events Made Easy: before 2.2.81 (fixed in 2.2.81)

Published 2022-06-20. Last modified 2026-06-17.