Browse CVEs

MEDIUM 5.4 CVE-2024-49695 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus wp-imageflow2 allow… Wp Flow Plus 5.2.4+ Fix from $1,6002024-10-24 MEDIUM 6.1 CVE-2024-45458 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar … Spiffy Calendar 4.9.14+ Fix from $1,6002024-09-15 MEDIUM 5.4 CVE-2024-45457 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar … Spiffy Calendar 4.9.14+ Fix from $1,6002024-09-15 HIGH 7.2 CVE-2024-38692 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar allows SQL Injec… Spiffy Calendar 4.9.12+ Fix from $1,9502024-07-22 MEDIUM 6.3 CVE-2024-30528 Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar.This issue affects Spiffy Calendar: from n/a through 4.9.10. Spiffy Calendar 4.9.11+ Fix from $1,6002024-06-04 MEDIUM 5.4 CVE-2024-35651 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus allows Store… Wp Flow Plus 5.2.3+ Fix from $1,6002024-06-04 MEDIUM 6.1 CVE-2024-30427 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Reflected… Spiffy Calendar 4.9.10+ Fix from $1,6002024-03-29 MEDIUM 5.3 CVE-2024-0855 The Spiffy Calendar WordPress plugin before 4.9.9 doesn't check the event_author parameter, and allows any user to alter it when creating an event, l… Spiffy Calendar 4.9.9+ Fix from $1,6002024-02-27 MEDIUM 5.4 CVE-2023-49745 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins Spiffy Calendar allows Stored XS… Spiffy Calendar 4.9.6+ Fix from $1,6002023-12-14 CRITICAL 9.8 CVE-2022-46859 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar … Spiffy Calendar after 4.9.1 Fix from $2,3002023-11-03 MEDIUM 6.1 CVE-2023-32122 Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Spiffy Plugins Spiffy Calendar plugin <= 4.9.3 versions. Spiffy Calendar after 4.9.3 Fix from $1,6002023-08-18 MEDIUM 5.4 CVE-2022-29434 Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete e… Spiffy Calendar after 4.9.0 Fix from $1,6002022-05-20