CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2022/02/21 6:15 p.m.•23 views

CVE-2022-25599

Cross-Site Request Forgery CSRF vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin versions = 4.9.0...

5.4CVSS0.00405EPSS

Exploits0References2

Vulnrichment•added 2022/02/21 5:49 p.m.•6 views

CVE-2022-25599 WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin versions = 4.9.0...

5.4CVSS5.5AI score0.00405EPSS

Exploits0References2

CVE•added 2022/02/21 5:49 p.m.•85 views

CVE-2022-25599

CVE-2022-25599 describes a CSRF vulnerability in the WordPress plugin Spiffy Calendar (versions ≤ 4.9.0) that allows an attacker to trigger event deletion due to missing token validation on the delete request. Multiple sources document the issue and confirm the affected component as the plugin’s ...

5.4CVSS4.7AI score0.00405EPSS

Exploits0References2Affected Software1