spiffyplugins records

13 published records for vendor spiffyplugins.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 84.6%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-46859No exploit	WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injectionspiffyplugins · spiffy calendar · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Nov 3, 2023
28Monitor	CVE-2024-38692No exploit	WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerabilityspiffyplugins · spiffy calendar · CWE-89 SQL injection	High7.2	—	0.7%	Jul 22, 2024
25Monitor	CVE-2024-30528No exploit	WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerabilityspiffyplugins · spiffy calendar · CWE-862 Broken access control (IDOR)	Medium6.3	—	0.3%	Jun 4, 2024
24Monitor	CVE-2024-30427No exploit	WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerabilityspiffyplugins · spiffy calendar · CWE-79 Pre-auth XSS	Medium6.1	—	0.4%	Mar 29, 2024
24Monitor	CVE-2023-32122No exploit	WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)spiffyplugins · spiffy calendar · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Aug 18, 2023
24Monitor	CVE-2024-45458No exploit	WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerabilityspiffyplugins · spiffy calendar · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Sep 15, 2024
21Monitor	CVE-2022-29434No exploit	WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerabilityspiffyplugins · spiffy calendar · CWE-639 Broken access control (IDOR)	Medium5.4	—	0.7%	May 20, 2022
21Monitor	CVE-2024-0855No exploit	Spiffy Calendar < 4.9.9 - Broken Access Controlspiffyplugins · spiffy calendar · CWE-863 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.5%	Feb 27, 2024
21Monitor	CVE-2023-49745No exploit	WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)spiffyplugins · spiffy calendar · CWE-79 XSS	Medium5.4	—	0.4%	Dec 14, 2023
21Monitor	CVE-2024-49695No exploit	WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerabilityspiffyplugins · wp flow plus · CWE-79 XSS	Medium5.4	—	0.3%	Oct 24, 2024
21Monitor	CVE-2024-45457No exploit	WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerabilityspiffyplugins · spiffy calendar · CWE-79 XSS	Medium5.4	—	0.3%	Sep 15, 2024
21Monitor	CVE-2024-35651No exploit	WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerabilityspiffyplugins · wp flow plus · CWE-79 XSS	Medium5.4	—	0.3%	Jun 4, 2024
17Monitor	CVE-2022-25599No exploit	WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerabilityspiffyplugins · spiffy calendar · CWE-352 Pre-auth CSRF	Medium4.3	—	0.4%	Feb 21, 2022

CVE-2022-46859
39Monitor
WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
spiffyplugins · spiffy calendarNov 3, 2023
CVE-2024-38692
28Monitor
WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability
HighCVSS 7.2No exploitEPSS 1%
- SQL injection
spiffyplugins · spiffy calendarJul 22, 2024
CVE-2024-30528
25Monitor
WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability
MediumCVSS 6.3No exploitEPSS 0%
- Broken access control (IDOR)
spiffyplugins · spiffy calendarJun 4, 2024
CVE-2024-30427
24Monitor
WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
spiffyplugins · spiffy calendarMar 29, 2024
CVE-2023-32122
24Monitor
WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
spiffyplugins · spiffy calendarAug 18, 2023
CVE-2024-45458
24Monitor
WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
spiffyplugins · spiffy calendarSep 15, 2024
CVE-2022-29434
21Monitor
WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability
MediumCVSS 5.4No exploitEPSS 1%
- Broken access control (IDOR)
spiffyplugins · spiffy calendarMay 20, 2022
CVE-2024-0855
21Monitor
Spiffy Calendar < 4.9.9 - Broken Access Control
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
spiffyplugins · spiffy calendarFeb 27, 2024
CVE-2023-49745
21Monitor
WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
spiffyplugins · spiffy calendarDec 14, 2023
CVE-2024-49695
21Monitor
WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
spiffyplugins · wp flow plusOct 24, 2024
CVE-2024-45457
21Monitor
WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
spiffyplugins · spiffy calendarSep 15, 2024
CVE-2024-35651
21Monitor
WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%
- XSS
spiffyplugins · wp flow plusJun 4, 2024
CVE-2022-25599
17Monitor
WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
spiffyplugins · spiffy calendarFeb 21, 2022