Description
Subscriber SQL Injection in Events Schedule - WordPress Events Calendar Plugin <= 2.7.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| CurlyThemes | Events Schedule - WordPress Events Calendar Plugin | ≤ 2.7.2 | — |
High · 8.5
CVE-2025-69135
EUVD-2025-210229GHSA-48qw-x3w8-j666
WordPress Events Schedule - WordPress Events Calendar Plugin plugin <= 2.7.2 - SQL Injection vulnerability
Published Jun 17, 2026 · Updated Jun 17, 2026 · Assigned by Patchstack