Lucene search
HistoryAug 15, 2022 - 11:21 a.m.
CVE-2022-2314
cve-2022-2314
vr calendar
wordpress plugin
php
security vulnerability
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.319 Low
EPSS
Percentile
97.0%
The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary PHP functions on the site.
Affected configurations
Node
vr_calendar_projectvr_calendarRange<2.3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vr_calendar_project | vr_calendar | * | cpe:2.3:a:vr_calendar_project:vr_calendar:*:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "VR Calendar",
"vendor": "Unknown",
"versions": [
{
"lessThan": "2.3.2",
"status": "affected",
"version": "2.3.2",
"versionType": "custom"
}
]
}
]Social References
More
Related
nvd
nvd
CVE-2022-2314
2022-08-15 11:21:21
patchstack
patchstack
prion
prion
Design/Logic Flaw
2022-08-15 11:21:00
wpvulndb
wpvulndb
VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
2022-07-22 00:00:00
wpexploit
wpexploit
VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
2022-07-22 00:00:00
cvelist
cvelist
CVE-2022-2314 VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
2022-08-15 08:36:40
nuclei
nuclei
WordPress VR Calendar <=2.3.2 - Remote Code Execution
2022-12-12 16:25:08
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.7 High
AI Score
Confidence
High
0.319 Low
EPSS
Percentile
97.0%
Related for CVE-2022-2314