CVE-2024-5889

The Events Manager plugin for WordPress contains a security flaw affecting all versions up to 6.4.8, which allows malicious actors to inject unauthorized code onto vulnerable sites through the 'country' parameter in certain scenarios. This occurs because the plugin fails to adequately scrub and sanitize input data, leaving it susceptible to exploitation by unauthenticated attackers who can manipulate user actions with ease.

Based on public CVE data (MITRE/NVD).