Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Pixelite Subscribe
Filtered by product Wp Fullcalendar
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-3891 1 Pixelite 1 Wp Fullcalendar 2023-02-22 N/A 5.3 MEDIUM
The WP FullCalendar WordPress plugin before 1.5 does not ensure that the post retrieved via an AJAX action is public and can be accessed by the user making the request, allowing unauthenticated attackers to get the content of arbitrary posts, including draft/private as well as password-protected ones.