HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-9700 — The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via t...

·Source: NIST NVD

Updated:

Executive Summary

The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used

Analysis

The Eventer plugin for WordPress is vulnerable to time-based SQL Injection via the ‘code’ parameter in all versions up to, and including, 4.4.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. CVSS Score: 7.5. Published: 2026-07-08T06:16:23.043.

Indicators of Compromise (1)

CVE (1)
CVE-2026-9700
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Jul 8, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Australia sets out long-term direction for A2A payments

The Account-to-Account (A2A) Payments Roundtable has today released its A2A payments vision, incorporating feedback from a public consultation and ongoing engagements with a broad range of end-users and other stakeholders on Australia’s A2A payments system.

Finextra
MEDIUMVulnerabilityNEW

Euroclear to acquire Uptevia

Euroclear today announces that it has entered into exclusive negotiations to acquire Uptevia, a leading French corporate trust services provider.

Finextra
MEDIUMVulnerabilityNEW

UK fintech Kord raises £6.4 million

Kord, a UK-based fintech focused on identity verification and payment processing for high value real estate transactions, has raised £6.4 million in Series A funding led by Guinness Ventures, with Beringea, SFC Capital, and angel investors also joining.

Finextra