Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2026/02/26 10:14 a.m.13 views

CVE-2026-2410

The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the showPageContent function. This makes it possible for unauthenticated attackers to a...

4.3CVSS5.4AI score0.00131EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/25 10:16 a.m.21 views

CVE-2026-2410

The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the showPageContent function. This makes it possible for unauthenticated attackers to a...

4.3CVSS0.00131EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/02/25 9:26 a.m.6 views

CVE-2026-2410 Disable Admin Notices – Hide Dashboard Notifications <= 1.4.2 - Cross-Site Request Forgery to Plugin Settings Update

The Disable Admin Notices – Hide Dashboard Notifications plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.2. This is due to missing nonce validation in the showPageContent function. This makes it possible for unauthenticated attackers to a...

4.3CVSS5.5AI score0.00131EPSS
SaveExploits0References4
Rows per page
Query Builder