PatchTheCVEeventr vulnerabilities and fixes
Recent CVEs affecting eventr, with upgrade or downgrade steps. 2 tracked.
eventr has 2 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2017-09-14. Highest priority: CVE-2017-1002019 (score 65/100).
- CVE-2017-1002019 CRITICAL 9.8 DOWNGRADE Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do not sanitize in
- CVE-2017-1002018 CRITICAL 9.8 DOWNGRADE Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and attendees.php code do not sanitize inp
FAQ
How do I fix eventr vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is eventr being exploited right now?
None of the tracked eventr CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which eventr CVE should I patch first?
CVE-2017-1002019 currently ranks highest (65/100): Vulnerability in wordpress plugin eventr v1.02.2, The edit.php form and event_form.php code do not sanitize in.