CVE-2026-16536 | Simple Google Calendar Outlook Events Widget Plugin server-side request forgery

A vulnerability was found in Simple Google Calendar Outlook Events Widget Plugin up to 3.0.x on WordPress. It has been classified as critical. This affects an unknown part. Performing a manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-16536. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.