CVE-2022-47427

The My Calendar plugin for WordPress versions before 3.3.25 contained a cross-site request forgery flaw that could be exploited to trick authenticated users into performing unintended actions. An attacker could leverage this vulnerability to force administrative users to execute operations such as changing account passwords, potentially granting the attacker unauthorized access to the site. The issue was discovered by rezaduty and has been resolved in version 3.3.25 and later.

Based on public CVE data (MITRE/NVD).