Log out
Get PRO

Latest

Input validation vulnerability in Simple Calendar – Google Calendar Plugin 3.1.42

  • Severity: medium-risk
  • Status: Fixed
  • Publication: May 11, 2023

The Simple Calendar plugin for WordPress is vulnerable to security issues in versions up to and including 3.1.43. This is because the plugin does not properly validate the requests it receives. This means that an unauthenticated attacker can send a forged request and potentially trick a site administrator into clicking on a link, which would allow them to clear the plugin’s data for a given ID.

Detected in:

Simple Calendar – Google Calendar Plugin fixed vulnerable versions: >= * <= 3.1.42

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.