wedding planner project vulnerabilities

Recent CVEs affecting wedding planner project products. 12 tracked.

wedding planner project has 12 tracked vulnerabilities, 5 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-10-14. Highest priority: CVE-2022-42075 (score 63/100).

• CVE-2022-42229 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 is vulnerable to Arbitrary code execution via package_edit.php.
• CVE-2022-42075 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 is vulnerable to arbitrary code execution.
• CVE-2022-42034 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.
• CVE-2022-41539 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /admin/
• CVE-2022-41538 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain an arbitrary file upload vulnerability in the component /Weddin
• CVE-2022-40485 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /package_
• CVE-2022-40484 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /adm
• CVE-2022-40483 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /wedding_
• CVE-2022-40404 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/se
• CVE-2022-40403 HIGH 7.2 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/fe
• CVE-2022-40402 HIGH 8.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking parameter at /adm
• CVE-2022-38509 CRITICAL 9.8 DOWNGRADE Wedding Planner v1.0 was discovered to contain a SQL injection vulnerability via the booking_id parameter at /

FAQ

How do I fix wedding planner project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is wedding planner project being exploited right now?

None of the tracked wedding planner project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which wedding planner project CVE should I patch first?

CVE-2022-42075 currently ranks highest (63/100): Wedding Planner v1.0 is vulnerable to arbitrary code execution..

Products

• wedding planner

RSS feed for wedding planner project · ← Back to latest CVEs