Lucene search

K
cvelistWPScanCVELIST:CVE-2022-2314
HistoryAug 15, 2022 - 8:36 a.m.

CVE-2022-2314 VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call

2022-08-1508:36:40
CWE-78
WPScan
www.cve.org

10 High

AI Score

Confidence

High

0.319 Low

EPSS

Percentile

97.0%

The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary PHP functions on the site.

CNA Affected

[
  {
    "product": "VR Calendar",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.3.2",
        "status": "affected",
        "version": "2.3.2",
        "versionType": "custom"
      }
    ]
  }
]

10 High

AI Score

Confidence

High

0.319 Low

EPSS

Percentile

97.0%