Skip to content
Sign in
4.3 Medium

CVE-2023-7198 The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References (IDOR) in…

Description

The WP Dashboard Notes WordPress plugin before 1.0.11 is vulnerable to Insecure Direct Object References (IDOR) in post_id= parameter. Authenticated users are able to delete private notes associated with different user accounts. This poses a significant security risk as it violates the principle of least privilege and compromises the integrity and privacy of user data.

Affected products and versions

Product Affected versions Fixed in
WP Dashboard Notes 1.0 earliest → < 1.0.11 1.0.11
wp_dashboard_notes 1.0 earliest → < 1.0.11 1.0.11

Other CVEs of WP Dashboard Notes

The 2 CVEs of WP Dashboard Notes →
CVE-2023-7239 The WP Dashboard Notes WordPress plugin before 1.0.11 does not validate that the user has access to the post_id… 7.5 High
Track this CVE