Filtered by vendor Spiffyplugins
Subscribe
Total
2 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2022-29434 | 1 Spiffyplugins | 1 Spiffy Calendar | 2022-06-02 | 4.0 MEDIUM | 5.4 MEDIUM |
| Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events. | |||||
| CVE-2022-25599 | 1 Spiffyplugins | 1 Spiffy Calendar | 2022-03-01 | 4.3 MEDIUM | 4.3 MEDIUM |
| Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions <= 4.9.0). | |||||