CVE-2022-38067

概要

参考情報

• patchstack.com/database/vulnerability/calendar-event/wordpress-event-calendar-calendar-plugin-1-4-6-unauthenticated-event-deletion-vulnerability/_s_id=cve · Third Party Advisory
• wordpress.org/plugins/calendar-event · Product

event calendar のその他の脆弱性

• CVE-2024-8700高 7.5The Event Calendar WordPress plugin through 1.0.4 does not check for authorization on delete actions, allowing unauthenticated users to dele…
• CVE-2022-36390中 5.4Authenticated (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at Wor…