Page & Post Notes
Page & Post Notes has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 4.3, and the most serious one scores 4.3 out of 10.
The most common weakness is Missing Authorization, behind 1 of the records (100%).
The one issue recorded for Page & Post Notes has a vendor fix available, so running the current release closes it.
All of these findings were reported by Athiwat Tiprasaharn (Jitlada). Page & Post Notes is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2025-12527Page & Post Notes <= 1.3.4 - Missing Authorization to Authenticated (Subscriber+) Note Update/Deletion
Read the full analysisVulnerability Records

Page & Post Notes
Author
YYDevelopment
The page & post notes plugin allow you to add notes on pages and posts on your wordpress website. With this plugin you will be able to easily create notes with important data and remove them if required. Page & Post Notes Plugin Features The ability to add notes to all pages and posts on your wordpress websites The ability to add as many notes you want for each page and post The ability to remove notes you don’t want anymore The ability to change text direction to rtl and ltr The ability to add separator line to the text The ability to save notes also on wordpress dashbaord About the author & license This plugin was brought to you for free by YYDevelopment under GPLv2 license. The plugin is 100% free and we intend to keep it that way in the future as well. You are free to use this plugin and all our other free wordpress plugins for your projects, your client’s projects or for anything else you need. If this plugin was helpful for you please share it online and if you get a chance to give it a positive review we will appreciate that. If have any problems or questions regarding our page & post notes plugin submit a ticket and we will be happy to help. By the way, we are based in Israel so we welcome you to visit our Hebrew site as well YYDevelopment Israel if you are fellow Israeli. Help support us with a coffee donation Don’t you just hate it when you download a plugin and you find out that in order to use it you have to buy a pro version? Even bigger problem is when you use a plugin and then just out of the blue the developer decides to add a pro version and he either changes the way the plugin works or he converts some of the free functions to paid ones. We sure did hate that and a few years back we decided to start creating some of the plugins ourselves and we decided to share them all with the WordPress community 100% FREE. Nowadays we have more than 15 plugins and you can download and use them all for free by Clicking Here. If you liked this plugin and you want to help support our cause, buy us a coffee. Studies show that coffee helps with creating WordPress plugins.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C