CVE-2022-2314

The VR Calendar WordPress plugin through 2.2.2 lets any user execute arbitrary PHP functions on the site.
Configurations

Configuration 1 (hide)

cpe:2.3:a:vr_calendar_project:vr_calendar:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 07:00

Type Values Removed Values Added
References () https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82 - Exploit, Third Party Advisory () https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82 - Exploit, Third Party Advisory

16 Aug 2022, 17:44

Type Values Removed Values Added
CWE CWE-78 NVD-CWE-noinfo
CPE cpe:2.3:a:vr_calendar_project:vr_calendar:*:*:*:*:*:wordpress:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
References (MISC) https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82 - (MISC) https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82 - Exploit, Third Party Advisory

15 Aug 2022, 11:21

Type Values Removed Values Added
New CVE

Information

Published : 2022-08-15 11:21

Updated : 2024-11-21 07:00


NVD link : CVE-2022-2314

Mitre link : CVE-2022-2314

CVE.ORG link : CVE-2022-2314


JSON object : View

Products Affected

vr_calendar_project

  • vr_calendar
CWE
CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

NVD-CWE-noinfo