Skip to content
Spiffyplugins vulnerabilities
Newest
-
spiffy plugins wp flow plus
WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability
CVE-2024-49695
6.5 Medium
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability
CVE-2024-45457
6.5 Medium
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability
CVE-2024-45458
7.1 High
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability
CVE-2024-38692
7.6 High
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability
CVE-2024-30528
5.4 Medium
-
spiffy plugins wp flow plus
WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability
CVE-2024-35651
6.5 Medium
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability
CVE-2024-30427
5.4 Medium
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
Spiffy Calendar < 4.9.9 - Broken Access Control
CVE-2024-0855
5.3 Medium
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49745
6.5 Medium
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection
CVE-2022-46859
8.5 High
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32122
5.8 Medium
-
spiffy plugins calendar, spiffyplugins spiffy calendar +1 more
WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability
CVE-2022-29434
6.3 Medium
-
spiffyplugins spiffy calendar, spiffy plugins calendar (wordpress plugin) +1 more
WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-25599
5.4 Medium