CVE-2024-35723

ÉLEVÉE 8.8CVE-2024-35723 · Published 10/06/2024 · updated 17/06/2026

En bref

CVE-2024-35723 est une vulnérabilité ÉLEVÉE (CVSS 8.8) touchant dashboard to-do list (arwebdesign).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.33%, plus élevée que 26.6% des vulnérabilités.
Correctif : mettre à jour vers 1.3.0 ou plus récent.

Package	Affected versions	Patched versions
dashboard to-do list arwebdesign	`< 1.3.0`	`1.3.0`

Description

Missing Authorization vulnerability in Andrew Dashboard To-Do List dashboard-to-do-list.This issue affects Dashboard To-Do List: from n/a through <= 1.2.0.

References

patchstack.com/database/Wordpress/Plugin/dashboard-to-do-list/vulnerability/wordpress-dashboard-to-do-list-plugin-1-2-0-broken-access-control-vulnerability
patchstack.com/database/vulnerability/dashboard-to-do-list/wordpress-dashboard-to-do-list-plugin-1-2-0-broken-access-control-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free