Description
Subscriber SQL Injection in Events Manager <= 7.4.6 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Marcus | Events Manager | ≤ 7.4.6 | — |
High · 8.5
CVE-2026-42633
EUVD-2026-96435GHSA-vgg7-g85q-whc4
WordPress Events Manager plugin <= 7.4.6 - SQL Injection vulnerability
Published Oct 10, 2026 · Updated Oct 11, 2026 · Assigned by Patchstack