← All advisories

Medium severity5.4NVD Advisory· Published Feb 21, 2022· Updated Jun 17, 2026

CVE-2022-25599

CVE-2022-25599

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to event deletion was discovered in Spiffy Calendar WordPress plugin (versions <= 4.9.0).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Spiffy Calendarllm-fuzzy
Range: <=4.9.0
Package: https://wordpress.org/plugins/spiffy-calendar
Spiffy Plugins/Spiffy Calendar (WordPress plugin)v5
Range: <= 4.9.0

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/spiffy-calendar/wordpress-spiffy-calendar-plugin-4-9-0-event-deletion-via-cross-site-request-forgery-csrf-vulnerabilitynvdThird Party Advisory
wordpress.org/plugins/spiffy-calendar/nvdVendor Advisory

News mentions

0

No linked articles in our index yet.