Input validation vulnerability in Schedule Posts Calendar 5.2

The Schedule Posts Calendar plugin for WordPress has a security flaw that could allow unauthenticated attackers to make changes to the plugin’s settings. This flaw exists in versions up to and including 5.2, and is caused by a missing validation check known as a ‘nonce’ on the plugin’s settings page. If attackers can somehow trick a site administrator into performing an action, such as clicking a link, they could send a forged request to modify the plugin’s settings.