Dashboard Notepad

Dashboard Notepad has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it remains unpatched as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Dashboard Notepad has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2025.

All of these findings were reported by Que Thanh Tuan - Blue Rock. Dashboard Notepad is installed on roughly 10,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 4.1.42.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Dashboard Notepad vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2025-57927

Dashboard Notepad <= 1.42 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2025-09-22 00:00	Dashboard Notepad <= 1.42 - Cross-Site Request Forgery Dashboard Notepad <= 1.42	`CVE-2025-57927`	4.3 Medium	Que Thanh Tuan - Blue Rock	No

Showing 1–1 of 1 reports

Plugin Profile

Latestv1.42

Dashboard Notepad

Author

Stephanie Leary

4.6(12)

92/100

Last Updated

2017-07-30 (9y ago)

Active Installs

10,000+

Downloads

93,895

Requires WP

2.8+

Requires PHP

Tested up to

WP 4.1.42

Created

2009-08-06 (17y ago)

This dashboard widget provides a simple notepad. The widget settings allow you to choose which roles can edit the notes, and which roles can merely read them. Version 1.30 also adds support for custom roles and integrates with the Members plugin for role settings. You can display the contents of your notepad using a template tag and/or shortcode. The widget permissions apply to these tags as well: only users with permission to read the notes will see the notes on the front end. You can use div#dashboard-notes in your theme’s CSS file to style the notes. Translations Belorussian (be_BY) by FatCow. Bulgarian (bg_BG) by SiteGround. Dutch (nl_NL) by Axel Vanderhaeghen German (de_DE) by Guido Kerkewitz Italian (it_IT) translation by Francesco Bevivino Romanian (ro_RO) by Web Hosting Geeks (Web Geek Sciense Swedish (se_SV) by Rabatt Ukranian (uk_UA) by Michael Yunat Translations If you would like to send me a translation, please write to me through my contact page. Let me know which plugin you’ve translated and how you would like to be credited. I will write you back so you can attach the files in your reply.

View on WordPress.org