High · 7.6 CVE-2023-52142 EUVD-2023-56815GHSA-qmm7-7fgh-3877

WordPress Events Shortcodes & Templates For The Events Calendar Plugin <= 2.3.1 is vulnerable to SQL Injection

Published Jan 8, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Cool Plugins Product: Events Shortcodes For The Events Calendar

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Cool Plugins Events Shortcodes For The Events Calendar.This issue affects Events Shortcodes For The Events Calendar: from n/a through 2.3.1.

Affected products

Vendor	Product	Affected	Fixed
Cool Plugins	Events Shortcodes For The Events Calendar	≤ 2.3.1	—

References

https://patchstack.com/database/vulnerability/template-events-calendar/wordpress-events-shortcodes-for-the-events-calendar-plugin-2-3-1-sql-injection-vulnerability?_s_id=cve vdb-entry