Vr Calendar Project Vr Calendar — known CVE vulnerabilities

Every CVE whose affected-product data names Vr Calendar Project Vr Calendar, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2022-2314 — CVSS 9.8 (critical): The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary PHP functions on the site.
• CVE-2022-3852 — CVSS 8.8 (high): The VR Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.3. This is due to…
• CVE-2025-5936 — CVSS 4.3 (medium): The VR Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.7. This is due…