https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T20:17:18.457040+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-0855 CVE-2024-0855 — Spiffy Calendar < 4.9.9 - Broken Access Control 2026-10-05T20:17:18.472740+00:00

Affected: Unknown Spiffy Calendar, spiffyplugins spiffy_calendar

The Spiffy Calendar WordPress plugin before 4.9.9 doesn't check the event_author parameter, and allows any user to alter it when creating an event, leading to deceiving users/admins that a page was created by a Contributor+.