CVE-2022-2314

CVE-2022-2314: VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call

Vendor Unknown

Product VR Calendar

Weakness CWE-78

Published August 15, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary PHP functions on the site.

Key dates

02Disclosure timeline

August 15, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2314 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/78.html

Related vulnerabilities

04Related CVE

CVE-2024-39522 Junos OS Evolved: CLI parameter processing issue allows privilege escalation CVE-2025-34152 Shenzhen Aitemi M300 Wi-Fi Repeater OS Command Injection via Time Parameter CVE-2023-50213 D-Link G416 nodered File Handling Command Injection Remote Code Execution Vulnerability CVE-2022-31232 CVE-2025-6978 Diagnostics command injection vulnerability