WordPress Plugin Vulnerabilities

Event Registration 5.32 - SQL Injection

Description

The event-registration WordPress plugin was affected by a SQL Injection security vulnerability.

Affects Plugins

Plugin icon
event-registration
No known fix

References

CVE
CVE-2010-4839
Exploitdb
15513

Classification

Type
SQLI
OWASP top 10
A1: Injection
CWE
CWE-89

Miscellaneous

Verified
No
WPVDB ID
2d74a371-03b2-483f-b428-a80aa8c60689

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2019-11-28 (about 6 years ago)

Other

Published
Title
Published
2026-01-08
Title
Workreap (theme's plugin) <= 3.3.6 - Authenticated (Subscriber+) SQL Injection
Published
2025-07-16
Title
YayExtra < 1.5.6 - Authenticated (Administrator+) SQL Injection
Published
2025-03-14
Title
School Management System – WPSchoolPress < 2.2.18 - Teacher+ SQL Injection
Published
2025-04-07
Title
3DPrint Lite <=2.1.3.6 - Authenticated (Admin+) SQL Injection via 'infill_text'
Published
2014-08-01
Title
WP Forum Server 1.6.5 - index.php Multiple Parameter SQL Injection