WordPress plugin
Simple Calendar – Google Calendar, Events, & ICS Feeds security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 7 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High0
- Medium7
- Low0
All Simple Calendar – Google Calendar, Events, & ICS Feeds vulnerabilities
Nothing in this view
No vulnerabilities match this filter. Show all.
Simple Calendar – Google Calendar, Events, & ICS Feeds: common questions
Does Simple Calendar – Google Calendar, Events, & ICS Feeds have known vulnerabilities?
Yes. VulnCrest Radar lists 7 known vulnerabilities in Simple Calendar – Google Calendar, Events, & ICS Feeds: 7 medium. None are known to affect version null.
How do I check which version of Simple Calendar – Google Calendar, Events, & ICS Feeds I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Simple Calendar – Google Calendar, Events, & ICS Feeds vulnerability?
CVE-2025-68979, published Dec 18, 2025: Google Calendar Events <= 3.5.9 - Unauthenticated Insecure Direct Object Reference. Severity: Medium (CVSS 5.3).
Is any Simple Calendar – Google Calendar, Events, & ICS Feeds vulnerability listed in CISA KEV?
No. None of the known Simple Calendar – Google Calendar, Events, & ICS Feeds vulnerabilities is currently listed in the CISA KEV catalog.