Lucene search
+L

43 matches found

Patchstack
Patchstack
•added 2026/08/05 9:35 a.m.•17 views

WordPress Material Dashboard plugin <= 1.4.10 - Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletion vulnerability

Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletion vulnerability discovered by Md. Moniruzzaman Prodhan NomanProdhan in WordPress Plugin Material Dashboard versions = 1.4.10...

7.3CVSS5.5AI score0.00412EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2026/08/05 8:16 a.m.•22 views

CVE-2026-6079

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

7.3CVSS0.00412EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/08/05 6:37 a.m.•9 views

CVE-2026-6079 Material Dashboard <= 1.4.10 - Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletion

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

7.3CVSS5.8AI score0.00412EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/08/05 6:37 a.m.•16 views

CVE-2026-6079

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

7.3CVSS5.8AI score0.00412EPSS
SaveExploits0References5
CVE
CVE
•added 2026/08/05 6:37 a.m.•64 views

CVE-2026-6079

Material Dashboard for WordPress (plugin) up to version 1.4.10 is vulnerable to missing authorization in the amd_ajax_target_task_manager() pathway, allowing unauthenticated attackers to enumerate all scheduled tasks, execute arbitrary tasks, and delete tasks via public_amd_ajax_handler. The unde...

7.3CVSS5.8AI score0.00412EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/08/05 6:37 a.m.•12 views

EUVD-2026-53174

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

7.3CVSS5.8AI score0.00412EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/08/05 6:37 a.m.•49 views

CVE-2026-6079 Material Dashboard <= 1.4.10 - Missing Authorization to Unauthenticated Task Enumeration, Execution, and Deletion

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

7.3CVSS0.00412EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/05 12:00 a.m.•2 views

CVE-2026-6079: Missing Authorization

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amdajaxtargettaskmanager function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all...

7.3CVSS6.1AI score0.00412EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-9464

Malicious code in bioql PyPI...

8.1CVSS8.6AI score0.0083EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-27448

Malicious code in bioql PyPI...

9.8CVSS8.7AI score0.00342EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•12 views

EUVD-2025-9068

Malicious code in bioql PyPI...

9.8CVSS8.9AI score0.00655EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•8 views

EUVD-2025-10795

Malicious code in bioql PyPI...

7.5CVSS8.2AI score0.01102EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/09/11 4:26 p.m.•11 views

CVE-2025-32486

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard material-dashboard.This issue affects Material Dashboard: from n/a through = 1.4.6...

9.8CVSS7.2AI score0.00342EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/09 5:15 p.m.•13 views

CVE-2025-32486

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard material-dashboard.This issue affects Material Dashboard: from n/a through = 1.4.6...

9.8CVSS0.00342EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/09/09 4:25 p.m.•3 views

CVE-2025-32486 WordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard. This issue affects Material Dashboard: from n/a through 1.4.6...

9.8CVSS6.5AI score0.00342EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/09/09 4:25 p.m.•28 views

CVE-2025-32486 WordPress Material Dashboard plugin <= 1.4.6 - Privilege Escalation Vulnerability

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard material-dashboard.This issue affects Material Dashboard: from n/a through = 1.4.6...

9.8CVSS0.00342EPSS
SaveExploits0References1
CVE
CVE
•added 2025/09/09 4:25 p.m.•51 views

CVE-2025-32486

CVE-2025-32486 exists in the WordPress plugin “Material Dashboard” (Hossein Material Dashboard) up to version 1.4.6. The connected documents identify an unauthenticated privilege-escalation vulnerability linked to a weak password-recovery mechanism, enabling elevation of privileges within affecte...

9.8CVSS7.2AI score0.00342EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/09/09 12:00 a.m.•8 views

WordPress plugin Material Dashboard 授权问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An authorization issue...

9.8CVSS8.2AI score0.00342EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/09/09 12:00 a.m.•16 views

PT-2025-36756

Name of the Vulnerable Software and Affected Versions: Hossein Material Dashboard versions n/a through 1.4.6 Description: A weakness exists in the password recovery mechanism for forgotten passwords in Hossein Material Dashboard. This issue could allow unauthorized access to accounts...

9.8CVSS8.6AI score0.00342EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/09 12:00 a.m.•1 views

CVE-2025-32486: Weak Password Recovery Mechanism for Forgotten Password

Weak Password Recovery Mechanism for Forgotten Password vulnerability in Hossein Material Dashboard material-dashboard.This issue affects Material Dashboard: from n/a through = 1.4.6...

9.8CVSS5.8AI score0.00342EPSS
SaveExploits0References1
Rows per page
Query Builder