Read the docs

Spiffy Plugins

Records16All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Spiffy Plugins records in CISA KEV

No Spiffy Plugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Spiffy Calendar 11 records MEDIUM Wp Flow Plus 2 records LOW

Records

2 records in Wp Flow Plus · all components

TI-2024-33181 CVE-2024-49695 · GHSA-f37j-hh5v-8qrg

WordPress WP Flow Plus plugin <= 5.2.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus wp-imageflow2 allows Stored XSS.This issue affects WP Flow Plus: from n/a through <= 5.2.3…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00276 Published 2024-10-24 No fix listed CWE-79
TI-2024-23520 CVE-2024-35651 · GHSA-g9q9-wh2q-x3pm

WordPress WP Flow Plus plugin <= 5.2.2 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Spiffy Plugins WP Flow Plus allows Stored XSS.This issue affects WP Flow Plus: from n/a through 5.2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00254 Published 2024-06-04 No fix listed CWE-79
Open these records in search →