Spiffy Calendar

77 Quality Score

Active Installs

15/30

With roughly 3,000 active installs, the plugin has a modest user base, which keeps the popularity score in the low-to-middling range.

Update Freshness

25/25

Maintenance scores perfectly thanks to a recent update on April 17, 2026 and a clean code lineage with no outstanding red flags.

User Rating

15/15

A 98 out of 100 rating from 38 users indicates very strong satisfaction from those who have tried it.

Support Health

8/15

Support health is weak, with only 1 recorded thread and a 0 percent resolution rate, so self-sufficiency is expected.

WP Compatibility

15/15

Compatibility is excellent, with confirmed testing on WordPress 6.9.4 and a minimum requirement of just 5.3.

Scores higher than 55% of indexed plugins

About

Manage and display your events in a responsive calendar with multiple views, widgets and shortcodes. Color-coded categories and recurrence support.

Active Installs 2k+

Rating ★★★★½ 4.9/5

Last Updated 2026-04-17 1:51pm GMT

Requires WordPress 5.3+

Tested Up To 6.9.7

Security History

15 known vulnerabilities, all patched

1 Critical 1 High 13 Medium

Most recent: August 28, 2026

View details ▸

Spiffy Calendar <= 5.0.8 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

August 28, 2026 Patched in ["5.0.9"] CVE-2026-39071

Spiffy Calendar <= 5.0.7 - Missing Authorization Medium

January 5, 2026 Patched in ["5.0.8"] CVE-2025-68523

Spiffy Calendar <= 4.9.13 - Reflected Cross-Site Scripting Medium

September 12, 2024 Patched in ["4.9.14"] CVE-2024-45458

Spiffy Calendar <= 4.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

September 12, 2024 Patched in ["4.9.14"] CVE-2024-45457

Spiffy Calendar <= 4.9.12 - Authenticated (Admin+) SQL Injection Medium

August 28, 2024 Patched in ["4.9.13"] CVE-2024-43969

Spiffy Calendar <= 4.9.11 - Authenticated (Administrator+) SQL Injection Critical

July 10, 2024 Patched in ["4.9.12"] CVE-2024-38692

Spiffy Calendar <= 4.9.10 - Missing Authorization Medium

March 29, 2024 Patched in ["4.9.11"] CVE-2024-30528

Spiffy Calendar <= 4.9.7 - Reflected Cross-Site Scripting Medium

March 28, 2024 Patched in ["4.9.10"] CVE-2024-30427

Spiffy Calendar <= 4.9.8 - Insufficient Authorization Medium

January 12, 2024 Patched in ["4.9.9"] CVE-2024-0855

Spiffy Calendar <= 4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting Medium

December 1, 2023 Patched in ["4.9.6"] CVE-2023-49745

Spiffy Calendar <= 4.9.3 - Reflected Cross-Site Scripting via page parameter Medium

May 3, 2023 Patched in ["4.9.4"] CVE-2023-32122

Spiffy Calendar <= 4.9.1 - Authenticated (Contributor+) SQL Injection High

December 16, 2022 Patched in ["4.9.2"] CVE-2022-46859

Spiffy Calendar <= 4.9.0 - Edit/Delete event via IDOR Medium

February 10, 2022 Patched in ["4.9.1"] CVE-2022-29434

Spiffy Calendar <= 4.9.0 - Event deletion via Cross-Site Request Forgery Medium

February 10, 2022 Patched in ["4.9.1"] CVE-2022-25599

Spiffy Calendar < 3.3.0 - Reflected Cross-Site Scripting Medium

June 2, 2017 Patched in ["3.3.0"] CVE-2017-9420

What It Does

Spiffy Calendar lets WordPress site owners create, categorize, and display events through a responsive calendar interface with multiple views, widgets, and shortcodes. It supports recurring events and colour-coded categories to help visitors scan upcoming activity at a glance. The plugin works for both simple event listings and more involved scheduling needs.

Who It's For

This plugin suits small organizations, community groups, fitness studios, restaurants, and educational institutions that want a lightweight, free calendar with built-in recurrence and category colour-coding. It is a good fit for sites that need to publish events but do not require ticketing, payment processing, or WooCommerce integration. The included block, shortcodes, and widgets make it accessible to non-developers.

Who Should Skip It

Anyone needing ticket sales, RSVPs, or WooCommerce-based booking should look elsewhere, since Spiffy Calendar does not include payment or registration features. Sites expecting large-scale support responsiveness will also want to consider better-supported alternatives given the 0 percent resolution rate on recorded threads.

The Bottom Line

Spiffy Calendar delivers strong user satisfaction, recent maintenance, and broad compatibility in a simple event display package. The main risks are its small install base and an unproven support record, so it is best suited to non-critical sites where the owner can troubleshoot independently. For event-heavy sites needing tickets or reliable support, The Events Calendar or a WooCommerce-based booking plugin is a safer choice.

Related Plugins

The Events Calendar 90/100

Pick this when you need a vastly larger install base (700,000+), stronger support, and an ecosystem of paid add-ons for tickets and RSVPs.

Spectra Legacy: Gutenberg Blocks 95/100

Choose Spectra when your priority is a broad block library rather than a dedicated event management system.

Event Booking Manager for WooCommerce 85/100

Opt for this when you run WooCommerce and need bookings, RSVPs, calendar management, and tickets in one tool.

Breadcrumb NavXT 88/100

Pick this if your actual need is breadcrumb navigation rather than events, since it leads its category at 800,000 installs.

PDF Embedder 86/100

Choose this alternative only if you need to embed PDFs, not calendars, since it serves a completely different function.