Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:my_calendar_project:my_calendar:*:*:*:*:*:wordpress:*:*

1 brief RSS
critical advisory

Unauthenticated Privilege Escalation in My Calendar WordPress Plugin

The My Calendar WordPress plugin is vulnerable to unauthenticated privilege escalation via a reflected GET parameter that triggers arbitrary function calls, allowing attackers to overwrite administrator credentials.

My Calendar – Accessible Event Manager
1r 1t 1c