WordPress Spiffy Calendar Vulnerabilities

Wordpress Spiffy Calendar vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

15 September 2024

Spiffy Calendar Stored XSS Vulnerability
CVE-2024-45457
WordPressSpiffy Calendar5.4MEDIUM
XSS Vulnerability in Spiffy Calendar Allows Reflected XSS
CVE-2024-45458
WordPressSpiffy Calendar6.1MEDIUM

22 July 2024

Spiffy Calendar SQL Injection Vulnerability
CVE-2024-38692
WordPressSpiffy Calendar7.2HIGH

29 March 2024

Reflected XSS Vulnerability in Spiffy Calendar
CVE-2024-30427
WordPressSpiffy Calendar6.1MEDIUM

27 February 2024

Plugin Flaw Allows Deceiving Event Creation
CVE-2024-0855
WordpressSpiffy Calendar👾🟡

14 December 2023

WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-49745
WordPressSpiffy Calendar6.5MEDIUM

3 November 2023

WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection
CVE-2022-46859
WordPressSpiffy Calendar9.8CRITICAL

18 August 2023

WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-32122
WordPressSpiffy Calendar6.1MEDIUM

20 May 2022

WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability
CVE-2022-29434
WordPressSpiffy Calendar5.4MEDIUM

21 February 2022

WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability
CVE-2022-25599
WordPressSpiffy Calendar (WordP...5.4MEDIUM

5 June 2017

Cross Site Scripting Vulnerability in Spiffy Calendar Plugin for WordPress
CVE-2017-9420
WordpressSpiffy Calendar6.1MEDIUM