High · 8.5 CVE-2024-30240 EUVD-2024-28171GHSA-j7r6-q4cc-8xh7

WordPress Calendarista plugin <= 15.5.7 - SQL Injection vulnerability

Published Mar 28, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Typps Calendarista.This issue affects Calendarista: from n/a through 15.5.7.

Affected products

Vendor	Product	Affected	Fixed
Typps	Calendarista	≤ 15.5.7	—

References

https://patchstack.com/database/vulnerability/calendarista/wordpress-calendarista-plugin-15-5-7-sql-injection-vulnerability?_s_id=cve vdb-entry