PT-2022-15878 · WordPress · Vr Calendar

Krishna Harsha Kondaveeti + 1 · CVE-2022-2314 · Published 2022-08-15 · Updated 2022-10-06

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions VR Calendar WordPress plugin versions prior to 2.3.3

Description The issue allows any user to execute arbitrary PHP functions on the site. This can lead to unauthorized access and potential code execution.

Recommendations For versions prior to 2.3.3, update to version 2.3.3 or later to resolve the issue.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2022-2314

Affected Products

Vr Calendar

References · 4

• 🔥 https://wpscan.com/vulnerability/b22fe77c-844e-4c24-8023-014441cc1e82 · Exploit
• https://osv.dev/vulnerability/CVE-2022-2314 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2314 · Security Note
• https://t.me/cibsecurity/48135 · Telegram Post