[HIGH] Unauthenticated Information Disclosure (IDOR) via Multisite switch_to_blog in My Calendar

PKSA-zws9-hgnd-t1ht CVE-2026-40308 GHSA-2mvx-f5qm-v2ch

Affected package: joedolson/my-calendar

Affected version: <3.7.7

Reported by:
GitHub