Spiffy Plugins vulnerabilities

CVEs per yearBy the year they were published

1. 20222
2. 20233
3. 20248
4. 20252

Newest CVEs

• CVE-2025-68523

  WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability

  Spiffy Plugins · Spiffy Calendar

  Medium4.3
• CVE-2025-58625

  WordPress WP Flow Plus Plugin <= 5.2.5 - Cross Site Scripting (XSS) Vulnerability

  Spiffy Plugins · WP Flow Plus

  Medium5.9
• CVE-2024-49695

  WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability

  Spiffy Plugins · WP Flow Plus

  Medium6.5
• CVE-2024-43969

  WordPress Spiffy Calendar plugin <= 4.9.12 - SQL Injection vulnerability

  Spiffy Plugins · Spiffy Calendar

  High7.6
• CVE-2024-45457

  WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability

  Spiffy Plugins · Spiffy Calendar

  Medium6.5
• CVE-2024-45458

  WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability

  Spiffy Plugins · Spiffy Calendar

  High7.1
• CVE-2024-38692

  WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability

  Spiffy Plugins · Spiffy Calendar

  High7.6
• CVE-2024-30528

  WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability

  Spiffy Plugins · Spiffy Calendar

  Medium5.4
• CVE-2024-35651

  WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability

  Spiffy Plugins · WP Flow Plus

  Medium6.5
• CVE-2024-30427

  WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability

  Spiffy Plugins · Spiffy Calendar

  Medium5.4