CVE-2025-46249

Cross-Site Request Forgery CSRF vulnerability in Michael Simple calendar for Elementor simple-calendar-for-elementor allows Cross Site Request Forgery.This issue affects Simple calendar for Elementor: from n/a through = 1.6.4...

CVE-2025-46249

CVE-2025-46249 is a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Simple calendar for Elementor (affected versions: up to 1.6.4). The NVD entry lists a high base CVSSv3.1 score of 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Patch/mitigation guidance across connected sourc...