CVE-2026-9711 — EventON WordPress Virtual Event Calendar Plugin

The EventON WordPress Virtual Event Calendar Plugin is vulnerable to SQL injection through the WordPress “search” parameter in versions up to and including 5.0.11.