CVE-2017-1002018

9.8 criticalEPSS 2.5%

Critical (9.8) in eventr project eventr. EPSS 2.5% chance of exploitation in the next 30 days.

Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize input, this allows for blind SQL injection via the event parameter.

Severity

CVSS 3.0

9.8 critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.5% chance of exploitation in the next 30 days; higher than 84% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2017-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

eventr_project:eventr

References

http://www.vapidlabs.com/advisory.php?v=192
https://wordpress.org/plugins/eventr/
http://www.vapidlabs.com/advisory.php?v=192
https://wordpress.org/plugins/eventr/

Check your stack JSON