Simple Calendar – Google Calendar Plugin
Simple Calendar – Google Calendar Plugin has 7 disclosed vulnerabilities in the WordSec catalog, reported between 2014 and 2025; all 7 are fixed as of September 2026. Their average CVSS score is 5.3, and the most serious one scores 6.4 out of 10. 2023 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Request Forgery (CSRF), behind 3 of the records (43%). Other recurring categories include Cross-Site Scripting, Authorization Bypass Through User-Controlled Key.
Every one of the 7 issues recorded for Simple Calendar – Google Calendar Plugin has a vendor fix available, so running the current release closes all known holes.
5 independent researchers contributed these findings, one record each. Simple Calendar – Google Calendar Plugin is installed on roughly 50,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2023-49151Google Calendar Events <= 3.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Read the full analysisVulnerability Records
Simple Calendar – Google Calendar Plugin
Author
SimpleCalendar
Simple Calendar is the easiest way to add Google Calendar events to your WordPress site. Quick to setup. Fine tune to your needs. Mobile responsive. Beautifully designed. Simple Calendar Features Display events from any public Google Calendar. Keep managing events in Google Calendar. No need to create events in WordPress. Out-of-the-box designs that match your theme’s look and feel. Fully responsive and mobile-friendly monthly grid and list views. Customize event content display using simple tags. No coding required. Combine multiple calendars into single displays explicitly or using categories. Intuitive, simple display configuration changes for fine tuning. Advanced settings to adjust time zones, date/time formats and start of the week. Integration with Event Calendar Newsletter for quickly turning your events into a newsletter-friendly format. Additional functionality offered with add-ons. Translations available with more being added on a regular basis. Translations welcome! Open source with code hosted on GitHub. Contributions welcome! Love using Simple Calendar? Consider purchasing a Premium Add-on FullCalendar Add-on Features Week and day views added alongside the month view. Display event titles and start times directly on your calendar. Faster load times when navigating through months, weeks or days. Configure header navigation buttons to allow site visitors to easily switch between views. Intuitive design for multi-day events. Customizable calendar heights with optional scroll bars. Set default start time for week and day views. Limit display times for week and day views. Works with our Google Calendar Pro add-on to display color-coded events within each view. Priority email support with a 24-hour response time during weekdays backed by a top-notch team. Google Calendar Pro Add-on Features Display events from both private and public Google Calendars. Highlight events with colors that match assigned Google Calendar event colors. Display attendee names, avatars and RSVP status for any private or public event. Display event organizer information. Display a list of attachments with links to their original source. Secure connection established between your site and Google using the OAuth standard. Works with our FullCalendar add-on to display beautiful month, week and day views with color-coded events. Priority email support with a 24-hour response time during weekdays backed by a top-notch team. Get ALL these features with our Premium Add-ons Want to take Simple Calendar for a spin first? Try out a Live Demo
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C