7 matches found
WordPress Simple Google Calendar Outlook Events Widget plugin < 3.1.0 - Unauthenticated SSRF via calendar_id vulnerability
Unauthenticated SSRF via calendarid vulnerability discovered by Pablo González Pérez, Francisco José Ramírez Vicente and Iñigo Sánchez Enciso in WordPress Plugin Simple Google Calendar Outlook Events Block Widget versions 3.1.0...
CVE-2026-16536 Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id
The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...
CVE-2026-16536: Server-Side Request Forgery (SSRF)
The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal...
EUVD-2025-14967
Malicious code in bioql PyPI...
CVE-2025-22497
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bramwaas Simple Google Calendar Outlook Events Block Widget simple-google-icalendar-widget allows Stored XSS.This issue affects Simple Google Calendar Outlook Events Block Widget: from n/a through ...
CVE-2025-22497
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bramwaas Simple Google Calendar Outlook Events Block Widget simple-google-icalendar-widget allows Stored XSS.This issue affects Simple Google Calendar Outlook Events Block Widget: from n/a through ...
