What’s Vulnerable › Products

Spiffy Plugins WP Flow Plus vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Spiffy Plugins WP Flow Plus version is affected

Latest Spiffy Plugins WP Flow Plus vulnerabilities

• CVE-2025-58625 — WordPress WP Flow Plus Plugin <= 5.2.5 - Cross Site Scripting (XSS) Vulnerability (CVSS 5.9)
• CVE-2024-49695 — WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)
• CVE-2024-35651 — WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability (CVSS 5.4)