Skip to contentSpiffy Plugins Calendar vulnerabilities
- spiffy plugins calendarWordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerabilityCVE-2025-685234.3 Medium
- spiffy plugins calendarWordPress Spiffy Calendar plugin <= 4.9.12 - SQL Injection vulnerabilityCVE-2024-439697.6 High
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-454576.5 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-454587.1 High
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerabilityCVE-2024-386927.6 High
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerabilityCVE-2024-305285.4 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-304275.4 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreSpiffy Calendar < 4.9.9 - Broken Access ControlCVE-2024-08555.3 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)CVE-2023-497456.5 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL InjectionCVE-2022-468598.5 High
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)CVE-2023-321225.8 Medium
- spiffy plugins calendar, spiffyplugins spiffy calendar +1 moreWordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerabilityCVE-2022-294346.3 Medium
- spiffyplugins spiffy calendar, spiffy plugins calendar (wordpress plugin) +1 moreWordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerabilityCVE-2022-255995.4 Medium