Skip to content

Known CVE

Registrations for the Events Calendar < 2.7.6 - SQL Injection

The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send_unregister_link AJAX action (available to both unauthenticated and authenticated users) before using it in a SQL statement, leading to an unauthenticated SQL injection.

CVE-2021-24943

Critical2021CVSS 9.8CWE-89

time-based-sqli · wpscan · cve2021 · wp · wp-plugin · wordpress · sqli · registrations-for-the-events-calendar

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website