Jeroen Sormani

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jeroen Sormani records in CISA KEV

No Jeroen Sormani vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Dashboard Notes 2 records HIGH

Records

2 records in Wp Dashboard Notes · all components

TI-2023-06623 CVE-2023-7239 · GHSA-928r-3p4g-rrxw

wp-dashboard-notes < 1.0.11 - Contributor+ Arbitrary Private Notes Update via IDOR

HIGH 66

The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id parameter in its wpdn_update_note AJAX action.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00558 Published 2025-05-15 Fixed in 1.0.11

TI-2023-06584 CVE-2023-7198 · GHSA-8c5f-qpcm-fgcv

WPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes

MEDIUM 55

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References (IDOR) in post_id= parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00402 Published 2024-02-27 Fixed in 1.0.11 CWE-639

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0