Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: wpformation Clear all filters
TI-2024-08559 CVE-2024-9223 · GHSA-2h52-9qm5-hq7p

WPDash Notes <= 1.3.5 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Exposure

Priority LOW 20

The WPDash Notes plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'wp_ajax_post_it_list_comment' function in all versions up to, and including, 1.3.5.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00368 Published 2024-11-23 No fix listed CWE-862