critical9.3
CVE-2026-49772
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind S…
Impact
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Liquid Web / StellarWP The Events Calendar allows Blind SQL Injection. This issue affects The Events Calendar: from 6.15.12 through 6.16.2.
Affected products
| Product | Affected versions |
|---|---|
| Events Calendar: From 6.15.12 | through 6.16.2. |
Versions were read from the advisory text. No structured product data has been published for this record yet.