CVE-2022-29434

🗓️ 20 May 2022 20:19:54Reported by PatchstackType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 75 Views

Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events

Reporter	Title	Published	Views	Family All 12
ATTACKERKB	CVE-2022-29434	10 Feb 202213:33	–	attackerkb
Circl	CVE-2022-29434	21 May 202200:31	–	circl
CNNVD	WordPress plugin Spiffy Calendar 安全漏洞	20 May 202200:00	–	cnnvd
CNVD	WordPress Spiffy Calendar plugin insecure direct object reference vulnerability	24 May 202200:00	–	cnvd
Cvelist	CVE-2022-29434 WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability	20 May 202220:19	–	cvelist
EUVD	EUVD-2022-33772	3 Oct 202520:07	–	euvd
NVD	CVE-2022-29434	20 May 202221:15	–	nvd
OSV	CVE-2022-29434	20 May 202221:15	–	osv
Patchstack	WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability	10 Feb 202200:00	–	patchstack
Prion	Spoofing	20 May 202221:15	–	prion

NVD

Vulners

Node

spiffyplugins spiffy_calendarRange≤4.9.0wordpress

[
  {
    "product": "Spiffy Calendar",
    "vendor": "Spiffy Plugins",
    "versions": [
      {
        "lessThanOrEqual": "4.9.0",
        "status": "affected",
        "version": "<= 4.9.0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wordpress	www.wordpress.org/plugins/spiffy-calendar/
patchstack	www.patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-0-edit-delete-event-via-idor-vulnerability