title: VR Calendar < 2.3.2 - Unauthenticated Arbitrary Function Call
description: The VR Calendar WordPress plugin through 2.3.2 lets any user execute arbitrary PHP functions on the site.
problem types: CWE-78 OS Command Injection
affected:
{
product: VR Calendar
vendor: Unknown
versions:
lessThan: 2.3.2, status: affected, version: 2.3.2, versionType: custom
}