CVE-2014-8586

Currently unrated

Key Information:

Vendor
Wordpress
Status
Cp Multi View Event Calendar
Vendor
CVE Published:
4 November 2014

Summary

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

References

http://www.securityfocus.com/bid/70718
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/97766
vdb-entryx_refsource_XF
http://osvdb.org/show/osvdb/113670
vdb-entryx_refsource_OSVDB

EPSS Score

49% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.