CVE-2023-36520

CVE-2023-36520 affects the WordPress Editorial Calendar plugin up to version 3.7.12. Affected: Editorial Calendar plugin for WordPress. What’s at issue: Insecure Direct Object References (IDOR) enabling an authorization bypass via a user-controlled key, as documented by Patchstack and CVE records...