TI-2024-07154 CVE-2024-7717 · GHSA-mjc4-387q-mg84
WP Events Manager <= 2.1.11 - Authenticated (Subscriber+) Time-Based SQL Injection
Priority MEDIUM 41
The WP Events Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order’ parameter in all versions up to, and including, 2.1.11 due to insufficient escaping on the user supplied parameter and…