PT-2026-68027 · WordPress · Material Dashboard
CVE-2026-6079
·
Published
2026-08-05
·
Updated
2026-08-05
CVSS v3.1
7.3
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Material Dashboard plugin for WordPress versions prior to 1.4.11
Description
Missing capability checks in the
amd ajax target task manager() function allow unauthenticated attackers to access and modify data. This issue enables the enumeration of all scheduled tasks, which may expose Personally Identifiable Information (PII), as well as the execution and deletion of tasks via the public amd ajax handler AJAX action.Recommendations
Update the plugin to version 1.4.11 or later.
As a temporary mitigation, restrict access to the
public amd ajax handler AJAX action.Fix
Missing Authorization
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Material Dashboard