5.4
Medium
CVE-2022-25599 Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress…
Description
Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions <= 4.9.0).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Spiffy Calendar (WordPress plugin) 4.9 | earliest → 4.9.0 | No fix stated |