📦

spider_event_calendar

Vendor: web-dorado

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 0 Remote Access
Total CVEs 17 Total Indexed
Avg. EPSS 1.22% Exploit Prob.
Latest CVE CVE-2017-7719 Apr 12

Security Vulnerability Index

Page 1 / 2
9.8 CVSS
CVE-2017-7719

SQL injection in the Spider Event Calendar (aka spider-event-calendar) plugin before 1.5.52 for WordPress is exploitable with the order_by parameter to calendar_functions.php or widget_Theme_functions.php, related to front_end/frontend_functions.php.

EPSS: 1.22%