CVE-2014-8586

SQL injection vulnerability in the CP Multi View Event Calendar plugin 1.01 for WordPress allows remote attackers to execute arbitrary SQL commands via the calid parameter.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

40.09% chance of exploitation in the next 30 days, 99th percentile

Published

2014-11-04

Updated

2024-08-06

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/35073

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wordpress_cp_calen…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/35073

References

• CVE Record
• NVD entry

Related

• CVE-2014-8577
• CVE-2014-8596
• CVE-2014-8555
• CVE-2014-8598
• CVE-2014-8517
• CVE-2014-8603