WP Manifestindependent plugin directory
manifest / events / simple-calendar

Crazy Simple Calendar WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB

WordPress Plugin Repository for "Crazy Simple Calendar"

★ 1stars
1.5.3.4latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/carterfromsl/simple-calendar/archive/refs/heads/main.zip
Updates itself. It ships its own updater, so new versions appear under Dashboard → Updates.

Crazy Simple Calendar for WordPress

WordPress Plugin Repository for "Crazy Simple Calendar"!

  • Contributors: carterfromsl
  • Tags: events, calendar
  • Requires at least: 4.7
  • Tested up to: 6.2.2
  • Stable tag: 1.2
  • Requires PHP: 7.0
  • License: MIT
  • License URI: https://opensource.org/licenses/MIT
  • Display your daily schedule with a super simple monthly calendar. Plan your events and manage them easily.

Description

Crazy Simple Calendar provides a super simple event planning experience with a minimalist monthly calendar.

  • Manage events for the year in a straightforward monthly table format.
  • Add custom content for each day, which can include HTML.
  • Includes predefined CSS classes for easy styling of the calendar and event contents.
  • No coding knowledge required for basic functionalities!

More information

For more information, please refer to the plugin's main PHP file or its CSS files.

Usage

After activating the plugin, you can add the calendar to any post or page using the [simple_calendar] shortcode. This will display the calendar for the current month with any custom content you've added for each day.

To add or edit the custom content for each day, go to the 'Simple Calendar Settings' menu in the WordPress admin area. You'll find a form where you can enter custom content for each day of the current month. The content can include HTML.

Styling

calendar comes with predefined CSS classes to make styling easy:

  • .cs-wrap: This class wraps all calendar elements.
  • .cs-calendar: This class is added to the wrapper div for the calendar. You can use it to target the table and all elements inside it. For example, you could set the font or width of the table.
  • .cs-event: This class is added to the div wrapper for the event content inside each table cell. You can use it to style the event content separately from the rest of the cell content.
  • .date: This class is added to the span that contains the day number in each table cell. You can use it to style the day numbers.
  • td.today: This class is added to the table cell for today's date. You can use it to highlight today's date in the calendar.
  • td.inactive: This class is added to table cells for days that are not part of the current month. You can use it to differentiate these cells from the cells of the current month.
  • .cs-title: This class is added to the h2 heading above the calendar.
  • .cs-nav: This class is added to the element that wraps the month navigation buttons.

You can add your custom styles to these classes in the Custom CSS section of the plugin settings. For admin styles, you can modify the admin-styles.css file in the plugin directory.

License

The Crazy Simple Calendar plugin is open-sourced software licensed under the MIT license.

Releases

3 releases.

Tag
Published
1.5.3.4 latest
Nov 14, 2024 1 year ago
Nov 14, 2024 1 year ago
Nov 13, 2024 1 year ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

Crazy Simple Calendar 1.5.3.4 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.5.3.4
Findings
2
Worst severity
medium
Content hash
a73e6a6da8f907f0ef16650d…

Findings

  • medium Calendar event/CSS saves lack nonce (admin CSRF → frontend HTML)

    csrf

    admin_page_content updates simple_calendar_{Y}_{m}_{d} options and simple_calendar_custom_css from POST without wp_verify_nonce. Menu requires manage_options. Event HTML (wp_kses_post) is echoed raw in calendar_template/simple_event_shortcode on the frontend, so admin CSRF yields stored HTML injection on public pages.

    crazy-simple-calendar.php:137-152

    Recommendation

    Add check_admin_referer; consider stricter kses for frontend echo.

  • low Admin event textareas echo stored HTML without escaping

    missing_escaping

    Option values are printed inside <textarea> without esc_textarea, breaking out of the textarea if content contains </textarea>.

    crazy-simple-calendar.php:177-180

    Recommendation

    Use esc_textarea($option_value).

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.