Skip to content
OpenAdvisories

Product · Simple Calendar

Simple Calendar – Google Calendar Plugin

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-8549

    Simple Calendar – Google Calendar Plugin <= 3.4.2 - Reflected Cross-Site Scripting

    The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.4.2. This makes it possible for u…

    Simple Calendar Simple Calendar – Google Calendar Plugin Web / CMS
  • Medium 6.5
    CVE-2023-49151

    WordPress Google Calendar Events Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Simple Calendar Simple Calendar – Google Calendar Plugin allows Stored XSS.This issue affects Simple Calendar – Google Calendar Plugin: from n/a through 3.2.…

    Simple Calendar Simple Calendar – Google Calendar Plugin
  • Medium 4.3
    CVE-2023-46189

    WordPress Google Calendar Events Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in Simple Calendar – Google Calendar Plugin <= 3.2.5 versions.

    Simple Calendar Simple Calendar – Google Calendar Plugin