List View Google Calendar
List View Google Calendar has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 4.4, and the most serious one scores 4.4 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for List View Google Calendar has a vendor fix available, so running the current release closes it.
All of these findings were reported by Pattama Tangpoonponwiwat (Kwan). List View Google Calendar is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.
CVE-2026-2396List View Google Calendar <= 7.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via Event Description
Read the full analysisVulnerability Records
List View Google Calendar
Author
kimipooh
The plugin is to create a shortcode for displaying the list view of public Google Calendars. Document Please see the documentation in detail. Japanese documentation
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C