CVE-2026-16536

UNKNOWN 0.0

Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal request.

Vendor	unknown
Product	simple google calendar outlook events widget
Published	Aug 4, 2026

Stay Ahead of the Next One

Get instant alerts for unknown simple google calendar outlook events widget

Be the first to know when new unknown vulnerabilities affecting unknown simple google calendar outlook events widget are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

Unknown / Simple Google Calendar Outlook Events Widget

0 < 3.1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

wpscan.com: https://wpscan.com/vulnerability/effa5549-ecfa-45ba-9044-7345d674c2ca/

Credits

Pablo González Pérez Francisco José Ramírez Vicente and Iñigo Sánchez Enciso WPScan