X
409441

The Plugin "EventON" has a security vulnerability

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/eventon/eventon-wordpress-virtual-event-calendar-plugin-5011-unauthenticated-blind-sql-injection-via-search-parameter

BY: Dan Jenkins - Jul 1,2026 AT 9:20AM - 1 month ago
    • Artem Jul 1,2026 AT 10:15AM - Posted 1 month ago - #409446

      Hello,

      Thank you for your messages!

      I am going to escalate this ticket to development to help in here. Please allow us some time to address this, and we truly appreciate your patience. Thank you for being a valued EventON customer!

    • aovivo Jul 1,2026 AT 11:02AM - Posted 1 month ago - #409448

      the critical security vulnerability has been made known to the public for over 2 days now – any advice?

    • GPW3P GPW3P Jul 2,2026 AT 12:56AM - Posted 1 month ago - #409461

      Hello 
      I am also concerned about this critical security breach.
      Is public deactivation of the search field a reliable mitigation measure?
      Regards

    • Artem Jul 2,2026 AT 1:03AM - Posted 1 month ago - #409467

      Hello,

      We are working on the issue and will update you all ASAP.

    • Anna Ross Jul 2,2026 AT 10:15AM - Posted 1 month ago - #409488

      Yes, agreed.  Will this be fixed today? As others have said, this has been public for 2 days now. I had thought it would have been reolved by now.  What are we supposed to do? Use an old version? …or just leave this risk open

    • Dev Help Jul 2,2026 AT 11:02AM - Posted 1 month ago - #409497

      Thank you for letting us know of this and we are working on get this resolved ASAP and getting a new update out soon!

    • Artem Jul 2,2026 AT 12:53PM - Posted 1 month ago - #409519

      We’ve just released 5.0.12 that fixes the issue. Please update ASAP.

    • Dev Help Jul 6,2026 AT 11:29AM - Posted 1 month ago - #409627

      Latest version will address this issue and the wordfence database should be updated soon to reflect this.

You must login to reply to this ticket

HelpDesk

Welcome to EventON helpdesk.

EventON is the #1 Best selling event calendar plugin for WordPress websites in envato marketplace.

Checkout EventON