https://blog.wpsec.com/events-manager/
100,000+ WordPress sites vulnerable due to Events Manager Plugin