CVE-2025-39481: WordPress Eventer plugin < 3.11.4 - SQL Injection vulnerability
Published May 16, 2025
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in imithemes Eventer eventer allows Blind SQL Injection.This issue affects Eventer: from n/a through < 3.11.4.
Affected Software
3 affected components
imithemes Eventer<=3.9.6
WordPress Event & Booking Manager Plugin<=3.9.6
imithemes Eventer Wordpress<=3.9.6
Remediation
Information
Update to 3.11.4 or a higher version.
Event History
May 16, 2025
CVE Published
via MITRE·03:45 PM
Data Sourced
via MITRE·03:45 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-39481?
CVE-2025-39481 has a high severity rating due to its potential for blind SQL injection attacks.
2
How do I fix CVE-2025-39481?
To fix CVE-2025-39481, update Imithemes Eventer to version 3.9.7 or later.
3
What software versions are affected by CVE-2025-39481?
CVE-2025-39481 affects Imithemes Eventer versions up to and including 3.9.6.
4
Can CVE-2025-39481 lead to data breaches?
Yes, CVE-2025-39481 can potentially allow attackers to execute unauthorized SQL commands, leading to data breaches.
5
Is CVE-2025-39481 type of SQL injection vulnerability?
Yes, CVE-2025-39481 is classified as an SQL injection vulnerability allowing blind SQL injection.