What’s Vulnerable › Products

Spiffy Plugins Spiffy Calendar vulnerabilities

13 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Spiffy Plugins Spiffy Calendar version is affected

Latest Spiffy Plugins Spiffy Calendar vulnerabilities

• CVE-2025-68523 — WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability (CVSS 4.3)
• CVE-2024-43969 — WordPress Spiffy Calendar plugin <= 4.9.12 - SQL Injection vulnerability (CVSS 7.6)
• CVE-2024-45458 — WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-45457 — WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-38692 — WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability (CVSS 7.2)
• CVE-2024-30528 — WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability (CVSS 6.3)
• CVE-2024-30427 — WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability (CVSS 6.1)
• CVE-2024-0855 — Spiffy Calendar < 4.9.9 - Broken Access Control (CVSS 5.3)
• CVE-2023-49745 — WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS) (CVSS 5.4)
• CVE-2022-46859 — WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection (CVSS 9.8)
• CVE-2023-32122 — WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS) (CVSS 6.1)
• CVE-2022-29434 — WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability (CVSS 5.4)
• CVE-2022-25599 — WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability (CVSS 4.3)