CVE-2024-8549

CVE-2024-8549: Simple Calendar – Google Calendar Plugin for WordPress is affected by Reflected Cross-Site Scripting in versions up to 3.4.2 due to insufficient escaping of URL parameters (add_query_arg). The vulnerability allows unauthenticated attackers to inject arbitrary scripts into pages tha...

CVE-2023-46189

CVE-2023-46189 is a CSRF vulnerability in the WordPress plugin Simple Calendar – Google Calendar Plugin, affected versions up to 3.2.5. Technical details in Patchstack/NVD indicate unauthenticated CSRF exposure with low to medium severity (Patchstack lists CVSS 4.3; fixed in 3.2.6). The vulnerabi...