Description The events-manager plugin before 5.6 for WordPress has code injection. References https://wordpress.org/plugins/events-manager/#developers https://wpvulndb.com/vulnerabilities/9761