Extension WordPress
Vulnérabilités Simple Calendar – Google Calendar Plugin
Cette page rassemble les failles publiées pour Simple Calendar – Google Calendar Plugin, leurs plages de versions affectées et les correctifs signalés dans la base locale.
Historique de sécurité
CVE et vulnérabilités de Simple Calendar – Google Calendar Plugin
7 fiches
Google Calendar Events <= 3.5.9 – Unauthenticated Insecure Direct Object Reference
The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.5.9 due to missing validation on a user controlled key. This makes it possible…
*-3.5.9
3.6.0
18/12/2025
Simple Calendar – Google Calendar Plugin <= 3.4.2 – Reflected Cross-Site Scripting
The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 3.4.2. This makes…
*-3.4.2
3.4.3
24/09/2024
Google Calendar Events <= 3.2.7 – Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including, 3.2.7 due to insufficient input sanitization and output escaping on user…
*-3.2.7
3.2.8
28/11/2023
Simple Calendar <= 3.2.4 – Cross-Site Request Forgery via duplicate_feed
The Simple Calendar – Google Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to 3.2.5 (exclusive). This is due to missing or incorrect nonce validation on the duplicate_feed function. This makes…
[*, 3.2.5)
3.2.5
20/10/2023
Google Calendar Events <= 3.2.5 – Cross-Site Request Forgery via bulk_actions
The Google Calendar Events plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.5. This is due to missing nonce validation on the 'bulk_actions' function. This makes it possible for unauthenticated attackers…
*-3.2.5
3.2.6
18/10/2023
Simple Calendar <= 3.1.42 – Cross-Site Request Forgery to Transient Cache Clearing
The Simple Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.1.42. This is due to missing nonce validation on the clear_cache() function used to clear the plugin's transients. This makes…
*-3.1.42
3.1.43
11/05/2023
Simple Calendar – Google Calendar Plugin < 2.0.4 – Reflected Cross-Site Scripting
Cross-site scripting (XSS) vulnerability in the Google Calendar Events plugin before 2.0.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the gce_feed_ids parameter in a gce_ajax action to wp-admin/admin-ajax.php.
[*, 2.0.4)
2.0.4
08/10/2014
Extensions également surveillés
WP Commander
Rechercher dans toute la base WordPress
Utilisez la recherche globale pour retrouver une extension, un thème, une CVE ou un identifiant de vulnérabilité.