WordPress Events Manager plugin version 5.61 suffers from a remote blind SQL injection vulnerability.