Monitor free

Report

New Known

Verified

Exploited

Fixed

WordPress My Calendar plugin <= 3.3.16 - Unauthenticated Open Redirect vulnerability

5.3

CVSS 3.1 score Medium severity

Report

Monitoring Monitoring Known to be exploited Coming soon

Find out about vulnerable plugins in your websites for free.

Scan your website

Software

My Calendar

Type

Plugin

Vulnerable versions

<= 3.3.16

Fixed in

3.3.17

PSID

d683ad02e3d0

CVE ID

CVE-2022-36371

Classification

Open Redirection

OWASP Top 10

A1: Injection

Required privilege

Can be exploited remotely without any authentication.

Credits

Dan Kegel

Publicly disclosed

2022-08-02

Patchstack vPatch available since

09.12.2021

Details

Unauthenticated Open Redirect vulnerability discovered by Dan Kegel in WordPress My Calendar plugin (versions <= 3.3.16).

Solution

Update the WordPress My Calendar plugin to the latest available version (at least 3.3.17).

References