EIP-2026-113640
PRE-CVEWordPress Plugin Community Events 1.2.1 - SQL Injection
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113640. PoCs published by Miroslav Stampar.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the WordPress Community Events plugin <= 1.2.1. The vulnerable code directly interpolates user-controlled input into a SQL query without sanitization, allowing an attacker to extract database information such as the MySQL version.
Description
WordPress Plugin Community Events 1.2.1 - SQL Injection
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the WordPress Community Events plugin <= 1.2.1. The vulnerable code directly interpolates user-controlled input into a SQL query without sanitization, allowing an attacker to extract database information such as the MySQL version.