openstation_admin_dashboard_notes_custom_dashboard_ai_assistant_pwa vulnerabilities

CVEs whose affected-version data names the openstation_admin_dashboard_notes_custom_dashboard_ai_assistant_pwa package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-109592Medium· 4.3

1w ago

OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure via PATCH /files/placements/<id> on orphaned placements

The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16. This is due to the plugin not properly verifying that a user …

▾ Sunlitwordpressdotorg · OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWAEPSS 0.34%via CVEORG