High · 8.5 CVE-2024-39638 EUVD-2024-38143GHSA-prqr-vwj9-vcfw

WordPress Registrations for the Events Calendar plugin <= 2.12.2 - SQL Injection vulnerability

Published Aug 29, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Roundup WP Product: Registrations for the Events Calendar

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Roundup WP Registrations for the Events Calendar allows SQL Injection.This issue affects Registrations for the Events Calendar: from n/a through 2.12.2.

Affected products

Vendor	Product	Affected	Fixed
Roundup WP	Registrations for the Events Calendar	≤ 2.12.2	—

References

https://patchstack.com/database/vulnerability/registrations-for-the-events-calendar/wordpress-registrations-for-the-events-calendar-plugin-2-12-2-sql-injection-vulnerability?_s_id=cve vdb-entry