Spiffy Plugins

11 results · Clear filters · Feed

• Medium 4.3
  CVE-2025-68523

  WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability

  Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through <= 5.0.7.

  Spiffy Plugins Spiffy Calendar
  Dec 24, 2025
• Medium 5.9
  CVE-2025-58625

  WordPress WP Flow Plus Plugin <= 5.2.5 - Cross Site Scripting (XSS) Vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus wp-imageflow2 allows Stored XSS.This issue affects WP Flow Plus: from n/a through <= 5.2.5.

  Spiffy Plugins WP Flow Plus
  Sep 3, 2025
• Medium 6.5
  CVE-2024-49695

  WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus wp-imageflow2 allows Stored XSS.This issue affects WP Flow Plus: from n/a through <= 5.2.3.

  Spiffy Plugins WP Flow Plus
  Oct 24, 2024
• Medium 6.5
  CVE-2024-45457

  WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Stored XSS.This issue affects Spiffy Calendar: from n/a through <= 4.9.13.

  Spiffy Plugins Spiffy Calendar
  Sep 15, 2024
• Medium 5.4
  CVE-2024-30528

  WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability

  Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar.This issue affects Spiffy Calendar: from n/a through 4.9.10.

  Spiffy Plugins Spiffy Calendar
  Jun 4, 2024
• Medium 6.5
  CVE-2024-35651

  WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a through 5.2.2.

  Spiffy Plugins WP Flow Plus
  Jun 4, 2024
• Medium 5.4
  CVE-2024-30427

  WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Reflected XSS.This issue affects Spiffy Calendar: from n/a through 4.9.7.

  Spiffy Plugins Spiffy Calendar
  Mar 29, 2024
• Medium 6.5
  CVE-2023-49745

  WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Stored XSS.This issue affects Spiffy Calendar: from n/a through 4.9.5.

  Spiffy Plugins Spiffy Calendar
  Dec 14, 2023
• Medium 5.8
  CVE-2023-32122

  WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)

  Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.

  Spiffy Plugins Spiffy Calendar
  Aug 18, 2023
• Medium 6.3
  CVE-2022-29434

  WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability

  Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events.

  Spiffy Plugins Spiffy Calendar
  May 20, 2022
• Medium 5.4
  CVE-2022-25599

  WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions <= 4.9.0).

  Spiffy Plugins Spiffy Calendar (WordPress plugin) Web / CMS
  Feb 21, 2022