SQL Injection

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. The Events Calendar <= 6.6.4 - Unauthenticated SQL InjectionCVE-2024-8275stellarwp · CVSS 9.8 · 50% likely

   CWE-89

2. The Events Calendar 6.15.1.1 - 6.15.9 - Unauthenticated SQL Injection via sCVE-2025-12197stellarwp · CVSS 7.5 · 18% likely

   CWE-89

3. GiveWP – Donation Plugin and Fundraising Platform <= 3.16.1 - Authenticated (GiveWP Manager+) SQL Injection via order ParameterCVE-2024-9130stellarwp · CVSS 7.2 · 0.7% likely

   CWE-89

4. The Events Calendar <= 6.15.1 - Unauthenticated SQL InjectionCVE-2025-9807stellarwp · CVSS 7.5 · 0.4% likely

   CWE-89

5. LearnDash LMS <= 5.0.3 - Authenticated (Contributor+) SQL Injection via 'filters[orderby_order]' ParameterCVE-2026-3079StellarWP · CVSS 6.5 · 0.3% likely

   CWE-89

6. Event Tickets and Registration <= 5.29.5 - Authenticated (Contributor+) SQL Injection via 'orderby' ParameterCVE-2026-97634stellarwp · CVSS 6.5 · 0.3% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.