Skip to content
OpenAdvisories

Vendor

roundupwp

1 known vulnerabilities.

Products

Registrations for the Events Calendar – Event Registration Plugin 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-13119

    Registrations for the Events Calendar <= 3.2 - Authenticated (Contributor+) SQL Injection via 'standard' Parameter

    The Registrations For The Events Calendar plugin for WordPress is vulnerable to SQL Injection via JSON keys in the 'standard' parameter handled by the rtec_records_edit AJAX action in versions up to and including 3.2. The handler decodes attacker-controlled J…

    roundupwp Registrations for the Events Calendar – Event Registration Plugin Web / CMS