CyberRota Analysis
AI-GeneratedThe Simple Google Calendar Outlook Events Widget plugin for WordPress versions prior to 3.1.0 is vulnerable due to inadequate validation of user-supplied URLs, enabling unauthenticated attackers to execute Server-Side Request Forgery (SSRF) attacks. This vulnerability could allow attackers to access internal resources and potentially exfiltrate sensitive information. WordPress site administrators using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The Simple Google Calendar Outlook Events Widget WordPress plugin before 3.1.0 does not validate a user-supplied URL before performing a server-side request, allowing unauthenticated attackers to perform Server-Side Request Forgery attacks and, in some cases, read the response of the internal request.