Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
WordPress Plugin WP FullCalendar Security Bypass - CVE-2022-3891 - Vulnerability Database
WP Plugin Wp Fullcalendar

WordPress Plugin WP FullCalendar Security Bypass - CVE-2022-3891

Medium
Reference: CVE-2022-3891
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2022-3891
Title: WordPress Plugin WP FullCalendar Security Bypass
Overview:

WordPress Plugin WP FullCalendar is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently get the content of arbitrary posts including draft/private as well as password-protected ones. WordPress Plugin WP FullCalendar version 1.4.1 is vulnerable prior versions may also be affected.