Log in Start free

Spiffy Plugins

Products

ProductCVEsExploitedLatest
Spiffy Calendar11–Dec 24, 2025
WP Flow Plus3–Sep 3, 2025
Spiffy Calendar (WordPress plugin)1–Feb 21, 2022

Exploited and recent CVEs

  • CVE-2025-68523 Medium 4.3 WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability 0.2%
  • CVE-2025-58625 Medium 5.9 WordPress WP Flow Plus Plugin <= 5.2.5 - Cross Site Scripting (XSS) Vulnerability 0.2%
  • CVE-2024-49695 Medium 6.5 WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-43969 High 7.6 WordPress Spiffy Calendar plugin <= 4.9.12 - SQL Injection vulnerability 0.4%
  • CVE-2024-45457 Medium 6.5 WordPress Spiffy Calendar plugin <= 4.9.13 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-45458 High 7.1 WordPress Spiffy Calendar plugin <= 4.9.13 - Reflected Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-38692 High 7.6 WordPress spiffy-calendar plugin <= 4.9.11 - SQL Injection vulnerability 0.7%
  • CVE-2024-30528 Medium 5.4 WordPress Spiffy Calendar plugin <= 4.9.10 - Broken Access Control vulnerability 0.3%
  • CVE-2024-35651 Medium 6.5 WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability 0.3%
  • CVE-2024-30427 Medium 5.4 WordPress Spiffy Calendar plugin <= 4.9.7 - Cross Site Scripting (XSS) vulnerability 0.4%
  • CVE-2023-49745 Medium 6.5 WordPress Spiffy Calendar Plugin <= 4.9.5 is vulnerable to Cross Site Scripting (XSS) 0.4%
  • CVE-2022-46859 High 8.5 WordPress Spiffy Calendar Plugin <= 4.9.1 is vulnerable to SQL Injection 0.7%
  • CVE-2023-32122 Medium 5.8 WordPress Spiffy Calendar Plugin <= 4.9.3 is vulnerable to Cross Site Scripting (XSS) 0.3%
  • CVE-2022-29434 Medium 6.3 WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability 0.7%
  • CVE-2022-25599 Medium 5.4 WordPress Spiffy Calendar plugin <= 4.9.0 - Event deletion via Cross-Site Request Forgery (CSRF) vulnerability 0.4%