WordPress CoSchedule plugin <= 3.4.0 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by daroo in WordPress Plugin CoSchedule versions = 3.4.0...

CVE-2025-49913

Missing Authorization vulnerability in CoSchedule CoSchedule coschedule-by-todaymade allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CoSchedule: from n/a through = 3.4.0...

CVE-2025-49913

CVE-2025-49913 : WordPress plugin CoSchedule (coschedule-by-todaymade) suffers a Missing Authorization / Broken Access Control vulnerability, affecting versions up to and including 3.4.0. The issue allows an improperly configured access control level to be exploited, enabling unauthorized access ...