Lucene search
+L

6 matches found

EUVD
EUVD
•added 2026/08/04 6:00 a.m.•17 views

EUVD-2026-52580

The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...

5.3CVSS5.5AI score0.00323EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/08/04 6:00 a.m.•51 views

CVE-2026-16536 Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id

The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...

0.00323EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/04 12:00 a.m.•3 views

CVE-2026-16536: Server-Side Request Forgery (SSRF)

The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...

5.3CVSS5.8AI score0.00323EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/04/08 12:00 a.m.•15 views

PT-2026-31145

Missing Authorization vulnerability in fullworks Display Eventbrite Events widget-for-eventbrite-api allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display Eventbrite Events: from n/a through = 6.5.6...

5.9AI score0.00261EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2024/07/09 7:38 a.m.•13 views

WordPress Extensions for Elementor plugin <= 2.0.32 - Authenticated (Contributor+) Stored Cross-Site Scripting via EE Events and EE Flipbox Widget vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via EE Events and EE Flipbox Widget vulnerability discovered by stealthcopter in WordPress Plugin Extensions for Elementor versions = 2.0.32...

6.4CVSS5.8AI score0.00349EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•15 views

WordPress plugin Extensions for Elementor security vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A security...

6.4CVSS6.1AI score0.00349EPSS
SaveExploits0References4
Rows per page
Query Builder