Skip to content
OpenAdvisories

Vendor

Andrew

3 known vulnerabilities.

Products

Dashboard To-Do List 2 ShopWP 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-39701

    WordPress ShopWP plugin <= 5.2.4 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Andrew ShopWP wpshopify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ShopWP: from n/a through <= 5.2.4.

    Andrew ShopWP
  • Medium 4.3
    CVE-2024-35723

    WordPress Dashboard To-Do List plugin <= 1.2.0 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0.

    Andrew Dashboard To-Do List
  • Medium 4.3
    CVE-2024-31376

    WordPress Dashboard To-Do List plugin <= 1.3.1 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.3.1.

    Andrew Dashboard To-Do List