Lucene search

CVE-2024-35723 WordPress Dashboard To-Do List plugin <= 1.2.0 - Broken Access Control vulnerability

🗓️ 10 Jun 2024 07:24:50Reported by PatchstackType

Missing authorization vulnerability in WordPress Dashboard To-Do List plugi

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 6
Vulnrichment	CVE-2024-35723 WordPress Dashboard To-Do List plugin <= 1.2.0 - Broken Access Control vulnerability	10 Jun 202407:50	–	vulnrichment
CVE	CVE-2024-35723	10 Jun 202408:15	–	cve
Patchstack	WordPress Dashboard To-Do List Plugin <= 1.2.0 is vulnerable to Broken Access Control	6 Jun 202400:00	–	patchstack
NVD	CVE-2024-35723	10 Jun 202408:15	–	nvd
WPVulnDB	Dashboard To-Do List < 1.3.0 - Missing Authorization via ardtdw_widgetsetup()	12 Jun 202400:00	–	wpvulndb
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (June 3, 2024 to June 9, 2024)	13 Jun 202415:35	–	wordfence

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "dashboard-to-do-list",
    "product": "Dashboard To-Do List",
    "vendor": "Andrew Rapps",
    "versions": [
      {
        "changes": [
          {
            "at": "1.3.0",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.2.0",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
patchstack	www.patchstack.com/database/vulnerability/dashboard-to-do-list/wordpress-dashboard-to-do-list-plugin-1-2-0-broken-access-control-vulnerability

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Jun 2024 07:50Current

CVSS34.3

EPSS0.00179

CWE-862