Skip to content
OpenAdvisories

Vendor

netweblogic

19 known vulnerabilities.

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-6970 Public exploit Scanner template EPSS 56%

    Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

    The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 7.0.3 due to insufficient escaping on the user supplied parameter and …

  • High 7.5

    Events Manager – Calendar, Bookings, Tickets, and more! <= 6.6.3 - Unauthenticated SQL Injection via Event Status Parameter

    The Events Manager – Calendar, Bookings, Tickets, and more! plugin for WordPress is vulnerable to time-based SQL Injection via the active_status parameter in all versions up to, and including, 6.6.3 due to insufficient escaping on the user supplied parameter …

  • High 8.8

    Meta Tag Manager <= 3.0.2 - Authenticated (Subscriber+) PHP Object Injection

    The Meta Tag Manager plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.0.2 via deserialization of untrusted input in the get_post_data function. This makes it possible for authenticated attackers, with contribu…