Skip to content
OpenAdvisories
High · 8.5 CVE-2025-28939 EUVD-2025-8136GHSA-rf6p-cgc2-j8vp

WordPress WP Google Calendar Manager plugin <= 2.1 - SQL Injection vulnerability

Published Mar 26, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EuroCizia WP Google Calendar Manager wp-gcalendar allows Blind SQL Injection.This issue affects WP Google Calendar Manager: from n/a through <= 2.1.

Affected products

VendorProductAffectedFixed
EuroCizia WP Google Calendar Manager ≤ 2.1 —

References