← Database

CVE-2022-29434

MEDIUM CVSS: 6.3 Published: 2022-05-20 Modified: 2026-06-17

Description

Insecure Direct Object References (IDOR) vulnerability in Spiffy Plugins Spiffy Calendar <= 4.9.0 at WordPress allows an attacker to edit or delete events.

Affected Platforms

Spiffyplugins Spiffy Calendar

Weakness Type

CWE-639, CWE-639

References