Spiffy Calendar

Vulnerabilities 21Slug spiffy-calendarLatest version 5.0.11WordPress.org →

Minimum safe version

5.0.8

Update to 5.0.8 or later to address 21 fixable vulnerabilities

Latest available5.0.11 ✓
Medium 4.3
2026-01-05< 5.0.8

Spiffy Calendar <= 5.0.7 - Missing Authorization

WordfenceCVE
N/A
2023-12-01< 4.9.6

Spiffy Calendar <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting

Wordfence
N/A
2023-05-03< 4.9.4

Spiffy Calendar <= 4.9.3 - Reflected Cross-Site Scripting via page parameter

Wordfence
N/A
2022-12-16< 4.9.2

Spiffy Calendar <= 4.9.1 - Authenticated (Contributor+) SQL Injection

Wordfence
N/A
2022-02-10< 4.9.1

WordPress Spiffy Calendar plugin <= 4.9.0 - Edit/Delete event via IDOR vulnerability

Patchstack
N/A
2022-02-10< 4.9.1

WordPress Spiffy Calendar plugin <= 4.9.0 - Multiple Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilities

Patchstack
N/A
2022-02-10< 4.9.1

WordPress Spiffy Calendar plugin <= 4.9.0 - Admin+ Persistent Cross-Site Scripting (XSS) vulnerability

Patchstack
N/A
2022-02-10< 4.9.1

WordPress Spiffy Calendar plugin <= 4.9.0 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Patchstack