2 matches found
CVE-2023-52142
CVE-2023-52142 is a SQL injection in WordPress plugin Events Shortcodes For The Events Calendar (
CVE-2022-4950
CVE-2022-4950 affects WordPress plugins developed by Cool Plugins. Affected component is arbitrary plugin installation/activation that can lead to remote code execution by authenticated users with minimal permissions (e.g., subscriber). Attack vector inferred as network-based from CVSS metrics, w...