Dashboard To-Do List

Dashboard To-Do List has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2024; all 2 are fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10. 2024 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for Dashboard To-Do List has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. Dashboard To-Do List is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

4.3/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Dashboard To-Do List vulnerabilities before they are exploited.

Highest severity on recordCVSS 4.3CVE-2024-35723

Dashboard To-Do List <= 1.2.0 - Missing Authorization via ardtdw_widgetsetup()

Read the full analysis

Vulnerability Records

2 records


2024-06-06 00:00	Dashboard To-Do List <= 1.2.0 - Missing Authorization via ardtdw_widgetsetup() Dashboard To-Do List <= 1.2.0	`CVE-2024-35723`	4.3 Medium	CatFather	Yes
2024-04-10 00:00	Dashboard To-Do List <= 1.3.1 - Cross-Site Request Forgery via ardtdw_widgetupdate() Dashboard To-Do List <= 1.3.1	`CVE-2024-31376`	4.3 Medium	Dhabaleshwar Das	Yes

Showing 1–2 of 2 reports

Latestv2.0.1

Dashboard To-Do List

Author

ARWD

5.0(8)

100/100

Last Updated

2026-08-21 (23d ago)

Active Installs

1,000+

Downloads

25,826

Requires WP

4.0+

Requires PHP

5.6+

Tested up to

WP 7.1

Created

2018-01-26 (9y ago)

Are you a web designer or developer? Or are you creating a plugin or a theme? Are you finding hard to keep track of your tasks or your notepad is just untidy? Add this useful tool to keep your project tasks in one place, right inside WordPress. Dashboard To-Do List adds a widget to your Admin Dashboard where you can write and manage a to-do list, then optionally show it as a collapsible floating panel on the frontend of your site. Plugin Features Add, edit, and delete to-do items directly from the Admin Dashboard Mark an item as complete (shown with a strikethrough on the frontend but stays in your list) or delete items to remove them from your list Bulk Edit mode for pasting or reorganising multiple items at once Display the list as a collapsible floating panel on your website Choose left or right positioning for the frontend panel Pick a custom colour for the frontend panel Control which user roles can see the dashboard widget Control which user roles (including guests) can see the frontend panel

View on WordPress.org