Skip to content
OpenAdvisories

Vendor

Innate Images

3 known vulnerabilities.

Products

VR Calendar 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-5936

    VR Calendar <= 2.4.7 - Cross-Site Request Forgery to Calendar Sync

    The VR Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.4.7. This is due to missing or incorrect nonce validation on the syncCalendar() function. This makes it possible for unauthenticated attac…

    Innate Images VR Calendar Web / CMS