Lucene search
HistoryFeb 27, 2024 - 9:15 a.m.
CVE-2024-0855
spiffy calendar
wordpress plugin
event_author
vulnerability
user alteration
The Spiffy Calendar WordPress plugin before 4.9.9 doesn’t check the event_author parameter, and allows any user to alter it when creating an event, leading to deceiving users/admins that a page was created by a Contributor+.
Related
prion
prion
Code injection
2024-02-27 09:15:00
wpexploit
wpexploit
Spiffy Calendar < 4.9.9 - Broken Access Control
2024-02-02 00:00:00
wpvulndb
wpvulndb
Spiffy Calendar < 4.9.9 - Broken Access Control
2024-02-02 00:00:00
cvelist
cvelist
CVE-2024-0855 Spiffy Calendar < 4.9.9 - Broken Access Control
2024-02-27 08:30:29
cve
cve
CVE-2024-0855
2024-02-27 09:15:37