CVE-2026-18057 | Events Manager Plugin up to 7.4.0 on WordPress sql injection

A vulnerability was found in Events Manager Plugin up to 7.4.0 on WordPress. It has been classified as critical. This issue affects some unknown processing. Performing a manipulation results in sql injection.

This vulnerability was named CVE-2026-18057. The attack may be initiated remotely. There is no available exploit.

Upgrading the affected component is recommended.