Nixpkgs Security Tracker

Login with GitHub

Suggestion detail

Dismissed

Permalink CVE-2025-67970

updated 1 month ago by @LeSuisse Activity log

Created automatic suggestion 1 month ago
@LeSuisse removed
3 packages
- python312Packages.schedula
- python313Packages.schedula
- python314Packages.schedula
1 month ago
@LeSuisse dismissed 1 month ago

WordPress Schedula plugin <= 1.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in vertim Schedula schedula-smart-appointment-booking allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Schedula: from n/a through <= 1.0.

References

https://patchstack.com/database/Wordpress/Plugin/schedula-smart-appointment-boo… vdb-entry

Affected products

schedula-smart-appointment-booking

=<<= 1.0

Ignored packages (3)

pkgs.python312Packages.schedula

Smart function scheduler for dynamic flow-based programming

nixos-25.11 1.5.72
- nixos-25.11-small 1.5.72
- nixpkgs-25.11-darwin 1.5.72

pkgs.python313Packages.schedula

Smart function scheduler for dynamic flow-based programming

nixos-unstable 1.5.72
- nixpkgs-unstable 1.5.72
- nixos-unstable-small 1.5.72
nixos-25.11 1.5.72
- nixos-25.11-small 1.5.72
- nixpkgs-25.11-darwin 1.5.72

pkgs.python314Packages.schedula

Smart function scheduler for dynamic flow-based programming

nixos-unstable 1.5.72
- nixpkgs-unstable 1.5.72
- nixos-unstable-small 1.5.72

WP plugin not present in nixpkgs