Spiffy Plugins vulnerabilities

Products

• Calendar 12
• Wp Flow Plus 3

Newest

• spiffy plugins calendar WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability CVE-2025-68523 4.3 MediumDecember 24, 2025
• spiffy plugins wp flow plus WordPress WP Flow Plus Plugin <= 5.2.5 - Cross Site Scripting (XSS) Vulnerability CVE-2025-58625 5.9 MediumSeptember 3, 2025
• spiffy plugins wp flow plus WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability CVE-2024-49695 6.5 MediumOctober 24, 2024
• spiffy plugins calendar WordPress Spiffy Calendar plugin <= 4.9.12 - SQL Injection vulnerability CVE-2024-43969 7.6 HighSeptember 17, 2024
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability CVE-2024-45457 6.5 MediumSeptember 15, 2024
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-45458 7.1 HighSeptember 15, 2024
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability CVE-2024-38692 7.6 HighJuly 22, 2024
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability CVE-2024-30528 5.4 MediumJune 4, 2024
• spiffy plugins wp flow plus WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability CVE-2024-35651 6.5 MediumJune 4, 2024
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-30427 5.4 MediumMarch 29, 2024
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more Spiffy Calendar < 4.9.9 - Broken Access Control CVE-2024-0855 5.3 MediumFebruary 27, 2024
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS) CVE-2023-49745 6.5 MediumDecember 14, 2023
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection CVE-2022-46859 8.5 HighNovember 3, 2023
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS) CVE-2023-32122 5.8 MediumAugust 18, 2023
• spiffy plugins calendar, spiffyplugins spiffy calendar +1 more WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability CVE-2022-29434 6.3 MediumMay 20, 2022
• spiffyplugins spiffy calendar, spiffy plugins calendar (wordpress plugin) +1 more WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability CVE-2022-25599 5.4 MediumFebruary 21, 2022