42 matches found
VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
The plugin lets any user execute arbitrary PHP functions on the site. PoC https://example.com/wp-admin/admin-post.php?vrccmd=phpinfo...
9.8CVSS1.3AI score0.1652EPSS
SaveExploits2Affected Software1
20