CVE-2022-25599

MEDIUM CVSS: 5.4 Published: 2022-02-21 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions <= 4.9.0).

Affected Platforms

Spiffyplugins Spiffy Calendar

Weakness Type

CWE-352, CWE-352

References