wedding planner vulnerabilities and fixes

Recent CVEs affecting wedding planner, with upgrade or downgrade steps. 12 tracked.

Also searched as: weddingplanner.

wedding planner has 12 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-10-14. Highest priority: CVE-2022-42075 (score 63/100).

• CVE-2022-42229 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
• CVE-2022-42075 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 is vulnerable to arbitrary code execution.
• CVE-2022-42034 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.
• CVE-2022-41539 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/
• CVE-2022-41538 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Weddin
• CVE-2022-40485 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_
• CVE-2022-40484 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /adm
• CVE-2022-40483 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_
• CVE-2022-40404 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/se
• CVE-2022-40403 HIGH 7.2 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/fe
• CVE-2022-40402 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /adm
• CVE-2022-38509 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /

FAQ

How do I fix wedding planner vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wedding planner being exploited right now?

None of the tracked wedding planner CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wedding planner CVE should I patch first?

CVE-2022-42075 currently ranks highest (63/100): Wedding Planner v1.0 is vulnerable to arbitrary code execution..

RSS feed for wedding planner · ← Back to latest CVEs