Skip to content
OpenAdvisories

Vendor

wordpressdotorg

2 known vulnerabilities.

Products

WordPress Importer 1 OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-109592

    OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure via PATCH /files/placements/<id> on orphaned placements

    The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. This is due to the plugin not properly verifying that a user is authorized to perfo…

    wordpressdotorg OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA Web / CMS