Spiffy Calendar Security Vulnerabilities and Issues — Spiffy Calendar CVE List

Lucene search

SpiffypluginsSpiffy Calendar

2 matches found

CVE•added 2024/02/27 9:15 a.m.•3812 views

CVE-2024-0855

The Spiffy Calendar WordPress plugin before 4.9.9 doesn't check the event_author parameter, and allows any user to alter it when creating an event, leading to deceiving users/admins that a page was created by a Contributor+.

5.3CVSS5.1AI score0.00258EPSS

CVE•added 2022/02/21 6:15 p.m.•72 views

CVE-2022-25599

Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions

5.4CVSS4.7AI score0.0025EPSS