Spiffy Plugins vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Spiffy Plugins products: 1 record(s), with severity, exploitation and fixes.

Spiffy Calendar 1

Exploited only (KEV) →

CVE-2025-68523 Medium · 4.3 CWE-862 Dec 24, 2025

WordPress Spiffy Calendar plugin <= 5.0.7 - Broken Access Control vulnerability

Missing Authorization vulnerability in Spiffy Plugins Spiffy Calendar spiffy-calendar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Spiffy Calendar: from n/a through <= 5.0.7.