Simple Google Calendar Outlook Events Widget
Simple Google Calendar Outlook Events Widget displays events from Google Calendar or Outlook calendars in a WordPress widget.
Simple Google Calendar Outlook Events Widget (simple-google-calendar-outlook-events-widget) is a WordPress plugin with 1 published CVE record in this archive. The latest tracked vulnerability was published Aug 04, 2026; the highest published CVSS base score is 5.3.
simple-google-calendar-outlook-events-widgetCVE-2026-16536: Calendar Events Widget exposes unauthenticated server-side requests
Simple Google Calendar Outlook Events Widget before 3.1.0 accepts a caller-supplied URL without restricting its destination before the server fetches it. An unauthenticated attacker can make the WordPress host request internal or otherwise protected addresses and, in some configurations, read the internal response. The public advisory does not disclose the endpoint, URL parameter, request function or conditions that make the response visible.
| Safe version |
|
||
|---|---|---|---|
| Aug 04, 2026 |
CVE-2026-16536
Calendar Events Widget exposes unauthenticated server-side requests
Simple Google Calendar Outlook Events Widget before 3.1.0 accepts a caller-supplied URL without restricting its destination before the server fetches it. An unauthenticated attacker can make the WordPress host request internal or otherwise protected addresses and, in some configurations, read the internal response. The public advisory does not disclose the endpoint, URL parameter, request function or conditions that make the response visible.
|
3.1.0 |
CVE5.3
NVDPending
|