Medium · 5.4 CVE-2023-36520 EUVD-2023-40469GHSA-9rvm-xpxj-3chj

WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)

Published Dec 20, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Marketing Fire Product: Editorial Calendar

Description

Authorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12.

Affected products

Vendor	Product	Affected	Fixed
MarketingFire	Editorial Calendar	≤ 3.7.12	—

References

https://patchstack.com/database/vulnerability/editorial-calendar/wordpress-editorial-calendar-plugin-3-7-12-insecure-direct-object-references-idor-vulnerability?_s_id=cve vdb-entry