Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Jeroen Sormani Clear all filters
TI-2024-28879 CVE-2024-43226 · GHSA-j9c3-x4qh-q8j7

WordPress WP Dashboard Notes plugin <= 1.0.11 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Jeroen Sormani WP Dashboard Notes allows Stored XSS.This issue affects WP Dashboard Notes: from n/a through 1.0…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00259 Published 2024-08-12 No fix listed CWE-79
TI-2023-06584 CVE-2023-7198 · GHSA-8c5f-qpcm-fgcv

WPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes

Priority MEDIUM 55

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References (IDOR) in post_id= parameter.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00402 Published 2024-02-27 Fixed in 1.0.11 CWE-639