CVE-2017-9429

by Jeremyin Security Bulletinson June 13, 2017

SQL injection vulnerability in the Event List plugin 0.7.8 for WordPress allows an authenticated user to execute arbitrary SQL commands via the id parameter to wp-admin/admin.php.