Skip to content
OpenAdvisories
High · 8.5 CVE-2022-46859 EUVD-2022-49640GHSA-8g6j-479w-669q

WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection

Published Nov 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Spiffy Plugins Product: Spiffy Calendar

Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows SQL Injection.This issue affects Spiffy Calendar: from n/a through 4.9.1.

Affected products

VendorProductAffectedFixed
Spiffy Plugins Spiffy Calendar ≤ 4.9.1 —

References