Lucene search
Marco WotschkaPATCHSTACK:2BADE583D8545FBBBB36929BC47A925DHistoryNov 03, 2022 - 12:00 a.m.
WordPress VR Calendar plugin <= 2.3.3 – Cross-Site Request Forgery (CSRF) vulnerability
2022-11-0300:00:00
Marco Wotschka
patchstack.com
2
wordpress
vr calendar
cross-site request forgery
csrf
marco wotschka
deletion
modification
plugin settings
update.
0.001 Low
EPSS
Percentile
38.7%
Cross-Site Request Forgery (CSRF) vulnerability leading to deletion and modification of calendars as well as the plugin settings discovered by Marco Wotschka in the WordPress VR Calendar plugin (versions <= 2.3.3).
Solution
Update the WordPress VR Calendar plugin to the latest available version (at least 2.3.4).
| CPE | Name | Operator | Version |
|---|---|---|---|
| vr calendar | le | 2.3.3 |
Related
nvd
nvd
CVE-2022-3852
2022-11-03 18:15:16
cve
cve
CVE-2022-3852
2022-11-03 18:15:16
prion
prion
Cross site request forgery (csrf)
2022-11-03 18:15:00
cvelist
cvelist
CVE-2022-3852
2022-11-03 17:15:11
wpvulndb
wpvulndb
VR Calendar < 2.3.4 - Calendar Deletion/Update & Settings Update via CSRF
2022-11-03 00:00:00