210 matches found
CVE-2026-39071
WordPress plugin Spiffy Plugin before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privileged role contributor can exploit this to redirect user to malicious site or control the account...
CVE-2026-39071
The Spiffy Plugin WordPress plugin, specifically versions 5.0.8 and lower , is vulnerable to Stored Cross-Site Scripting (XSS) in the Event Title field. An authenticated attacker with the lowest privileged role (contributor ) can exploit this flaw to redirect users to a malicious site or gain con...
PT-2026-83173
WordPress plugin Spiffy Plugin before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privileged role contributor can exploit this to redirect user to malicious site or control the account...
CVE-2026-39071: Improper Neutralization of Input During Web Page Generation
WordPress plugin Spiffy Plugin before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privileged role contributor can exploit this to redirect user to malicious site or control the account...
CVE-2026-39071
WordPress plugin Spiffy Plugin before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privileged role contributor can exploit this to redirect user to malicious site or control the account...
EUVD-2026-67900
WordPress plugin Spiffy Plugin before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privileged role contributor can exploit this to redirect user to malicious site or control the account...
CVE-2026-39071
WordPress plugin Spiffy Plugin before 5.0.9 is affected by Stored Cross-Site Scripting in Event Title field. An authenticated attacker with the lowest privileged role contributor can exploit this to redirect user to malicious site or control the account...
WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by daroo in WordPress Plugin Spiffy Calendar versions = 5.0.7...
WordPress Spiffy Calendar Missing Authorization Vulnerability
WordPress Spiffy Calendar is a WordPress calendar plugin focused on helping users manage and display events. A lack of authorization vulnerability exists in WordPress Spiffy Calendar, which can be exploited by an attacker to leverage a misconfigured access control security level...
CVE-2025-68523
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through = 5.0.7...
EUVD-2025-205197
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through = 5.0.7...
CVE-2025-68523
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through = 5.0.7...
CVE-2025-68523 WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through = 5.0.7...
CVE-2025-68523 WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through = 5.0.7...
CVE-2025-68523
CVE-2025-68523 affects WordPress Spiffy Calendar plugin spiffy-calendar (versions up to and including 5.0.7) with a Broken Access Control/Missing Authorization vulnerability due to incorrectly configured access control. Public sources in connected documents confirm the issue, describing insuffici...
CVE-2025-68523: Missing Authorization
Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through = 5.0.7...
PT-2025-53090
Name of the Vulnerable Software and Affected Versions Spiffy Plugins Spiffy Calendar versions through 5.0.7 Description An authorization issue exists in Spiffy Plugins Spiffy Calendar spiffy-calendar, allowing exploitation due to incorrectly configured access control security levels...
WordPress plugin Spiffy Calendar 安全漏洞
WordPress Spiffy Calendar is a WordPress calendar plugin focused on helping users manage and display events. A lack of authorization vulnerability exists in WordPress Spiffy Calendar, which can be exploited by an attacker to leverage a misconfigured access control security level...
