Dashboard Notes

Dashboard Notes has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it remains unpatched as of October 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (100%).

The one issue recorded for Dashboard Notes has no published fix yet, which makes virtual patching the only reliable mitigation. The oldest unresolved one dates back to 2026.

All of these findings were reported by JunHee CHO. Dashboard Notes is installed on roughly 500 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.10.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage0%

Open

Fixed

Get automatic notifications for all Dashboard Notes vulnerabilities before they are exploited.

Most severe open issueCVSS 4.3CVE-2026-62026

Dashboard Notes <= 1.0.3 - Cross-Site Request Forgery

Read the full analysis

Vulnerability Records

1 records


2026-10-09 00:00	Dashboard Notes <= 1.0.3 - Cross-Site Request Forgery Dashboard Notes <= 1.0.3	`CVE-2026-62026`	4.3 Medium	JunHee CHO	No

Showing 1–1 of 1 reports

Latestv1.0.3

Dashboard Notes

Author

MIGHTYminnow

4.7(19)

94/100

Last Updated

2026-03-10 (7mo ago)

Active Installs

500+

Downloads

15,697

Requires WP

3.0+

Requires PHP

Tested up to

WP 6.9.10

Created

2014-04-18 (13y ago)

Requires Plugins

classic-widgets

The plugin Classic Widgets is needed (this plugin doesn’t work with Gutenberg). Compatible with PHP 8.2 Do you find this plugin helpful? Please consider leaving a 5-star review. Dashboard Notes lets you create super simple notes and instructions for your clients within the WordPress dashboard. Choose the color of the notification, whether or not to include a logo, and exactly what pages to include the notification on (uses simple URL matching). Usage Install the Dashboard Notes. Go to Appearance > Widgets where you will see a new “Dashboard Notes” sidebar. To create a note, simply drag a new widget into the sidebar and give it some content (we typically use a text/HTML widget). Once you’ve added content to the widget, click save, and the Dashboard Notes settings for this widget will appear. Adjust the settings to meet your needs, and click save when you’re done. Refresh, or navigate to any page to see your new note in action. Use the plugin settings found via Settings > Dashboard Notes to choose which user roles can/can’t see the notices. Credits Special thanks to Kaspars Dambis for his work on Widget Context – much of this project is based on that code.

View on WordPress.org