VendorsSpiffy Pluginsspiffy_calendarall versions
Vulnerabilities

Spiffy Plugins Spiffy Calendar

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2022-46859
WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection
Published 2023-11-03 · Modified
9.8EPSS 0.006
CVE-2024-38692
WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability
Published 2024-07-22 · Modified
7.6EPSS 0.007
CVE-2024-45458
WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability
Published 2024-09-15 · Modified
7.1EPSS 0.003
CVE-2023-49745
WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-14 · Modified
6.5EPSS 0.004
CVE-2024-45457
WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability
Published 2024-09-15 · Modified
6.5EPSS 0.003
CVE-2022-29434
WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability
Published 2022-05-20 · Modified
6.3EPSS 0.007
CVE-2024-30528
WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability
Published 2024-06-04 · Modified
6.3EPSS 0.003
CVE-2024-30427
WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability
Published 2024-03-29 · Modified
6.1EPSS 0.004
CVE-2023-32122
WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)
Published 2023-08-18 · Modified
6.1EPSS 0.003
CVE-2022-25599
WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability
Published 2022-02-21 · Modified
5.4EPSS 0.004
CVE-2024-0855
Spiffy Calendar < 4.9.9 - Broken Access Control
Published 2024-02-27 · Analyzed
5.3EPSS 0.005