Spiffyplugins: Security Vulnerabilities
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions.
CVSS Score
5.8
EPSS Score
0.003
Published
2023-08-18
Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events.
CVSS Score
6.3
EPSS Score
0.007
Published
2022-05-20
Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions <= 4.9.0).
CVSS Score
5.4
EPSS Score
0.004
Published
2022-02-21
Page 2