Plugin icon

Simple Calendar – Google Calendar Plugin

google-calendar-events

Vulnerabilities:

6

Last Updated:

May 28, 2026

Active Installs:

50000

Published
Title
Fixed in
CVSS
Published
2025-12-18
Title
Google Calendar Events < 3.6.0 - Unauthenticated Insecure Direct Object Reference
Fixed in
Fixed in 3.6.0
CVSS
5.3 (medium)
Published
2024-09-24
Title
Simple Calendar – Google Calendar Plugin < 3.4.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 3.4.3
CVSS
6.1 (medium)
Published
2023-11-28
Title
Google Calendar Events < 3.2.8 - Contributor+ Stored XSS via shortcode
Fixed in
Fixed in 3.2.8
CVSS
5.9 (medium)
Published
2023-10-20
Title
Simple Calendar < 3.2.5 - Cross-Site Request Forgery via duplicate_feed
Fixed in
Fixed in 3.2.5
CVSS
4.3 (medium)
Published
2023-10-18
Title
Google Calendar Events < 3.2.6 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 3.2.6
CVSS
4.3 (medium)
Published
2014-10-08
Title
Google Calendar Events < 2.0.4 - XSS
Fixed in
Fixed in 2.0.4
CVSS
n/a