TI-2026-01644 CVE-2026-1987 · GHSA-wcg8-g6m5-jgh5
Scheduler Widget <= 0.1.6 - Insecure Direct Object Reference to Authenticated (Subscriber+) Arbitrary Event Modification
Priority LOW 24
The Scheduler Widget plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 0.1.6.