TI-2026-03567 CVE-2026-4117 · GHSA-5mhq-hh7f-vmww
CalJ <= 1.5 - Authenticated (Subscriber+) Arbitrary Settings Modification via 'save-obtained-key' Action
Priority LOW 30
The CalJ plugin for WordPress is vulnerable to Missing Authorization in all versions up to, and including, 1.5.