WordPress Plugin Vulnerabilities

Events Manager Pro < 2.6.7.2 - CSV Injection

Description

The events-manager-pro WordPress plugin was affected by a CSV Injection security vulnerability.

Affects Plugins

Plugin icon
events-manager-pro
Fixed in 2.6.7.2

References

URL
https://wp-events-plugin.com/blog/2020/02/05/events-manager-5-9-7-2-pro-2-6-7-2/
URL
https://fortiguard.com/zeroday/FG-VD-20-034

Miscellaneous

Original Researcher
Vishnupriya Ilango of Fortinet's FortiGuard Labs
Verified
No
WPVDB ID
70e8cc0d-4c7e-4ea3-b93c-e326e049d951

Timeline

Publicly Published
2020-02-05 (about 6 years ago)
Added
2020-02-06 (about 6 years ago)
Last Updated
2020-02-07 (about 6 years ago)

Other

Published
Title
Published
2024-10-15
Title
Job Board Manager for WordPress <= 1.0 - Unauthenticated Privilege Escalation
Published
2023-06-29
Title
Web3 – Crypto wallet Login & NFT token gating < 2.7.0 - Authentication Bypass
Published
2014-08-01
Title
WP Property < 1.38.4 - Non-administrative User XMLI Remote Information Disclosure
Published
2018-05-08
Title
Google Forms < 0.94 - Eval Injection
Published
2025-12-05
Title
SV100 Companion <= 2.0.02 - Unauthenticated Privilege Escalation