Jeroen Sormani

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jeroen Sormani records in CISA KEV

No Jeroen Sormani vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Dashboard Notes 2 records HIGH

Records

3 records

TI-2023-06623 CVE-2023-7239 · GHSA-928r-3p4g-rrxw

wp-dashboard-notes < 1.0.11 - Contributor+ Arbitrary Private Notes Update via IDOR

HIGH 66

The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id parameter in its wpdn_update_note AJAX action.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00558 Published 2025-05-15 Fixed in 1.0.11

TI-2023-06584 CVE-2023-7198 · GHSA-8c5f-qpcm-fgcv

WPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes

MEDIUM 55

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References (IDOR) in post_id= parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00402 Published 2024-02-27 Fixed in 1.0.11 CWE-639

TI-2024-28879 CVE-2024-43226 · GHSA-j9c3-x4qh-q8j7

WordPress WP Dashboard Notes plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jeroen Sormani WP Dashboard Notes allows Stored XSS.This issue affects WP Dashboard Notes: from n/a through 1.0…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00259 Published 2024-08-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0