-/10CrowdSec Score
My Calendar - SQLi (CVE-2023-6360)
Published on30-11-2023
First seen on01-01-1970
CVSS 8.6/10Joe Dolson - My Calendar Wordpress Plugin
0Exploiting IPs reported
The 'My Calendar' WordPress Plugin, version < 3.4.22 is affected by an unauthenticated SQL injection vulnerability in the 'from' and 'to' parameters in the '/my-calendar/v1/events' rest route.
Exploitation
Get real-time information about exploitation attempts and actors involved.
Common Weakness Enumeration (CWE)
Protection
Find out relevant information to protect your stack against this CVE.
Blocklist
With our advanced worldwide network detection, CrowdSec can provide a list of IPs known for exploiting the vulnerability.
To increase your protection against this CVE, block exploitation attempts with this list of identified actors.