CVE-2025-62087

Missing Authorization vulnerability in Web Builder 143 Sticky Notes for WP Dashboard wb-sticky-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Notes for WP Dashboard: from n/a through <= 1.2.4.
CVSS

No CVSS.

Configurations

No configuration.

History

01 Apr 2026, 17:27

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 4.3
v2 : unknown
v3 : unknown
Summary
  • (es) Vulnerabilidad por ausencia de autorización en Web Builder 143 Sticky Notes for WP Dashboard permite explotar niveles de seguridad de control de acceso mal configurados. Este problema afecta a Sticky Notes para WP Dashboard: desde n/a hasta 1.2.4.
Summary (en) Missing Authorization vulnerability in Web Builder 143 Sticky Notes for WP Dashboard allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Notes for WP Dashboard: from n/a through 1.2.4. (en) Missing Authorization vulnerability in Web Builder 143 Sticky Notes for WP Dashboard wb-sticky-notes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sticky Notes for WP Dashboard: from n/a through <= 1.2.4.
References
  • {'url': 'https://patchstack.com/database/wordpress/plugin/wb-sticky-notes/vulnerability/wordpress-sticky-notes-for-wp-dashboard-plugin-1-2-4-broken-access-control-vulnerability?_s_id=cve', 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/Wordpress/Plugin/wb-sticky-notes/vulnerability/wordpress-sticky-notes-for-wp-dashboard-plugin-1-2-4-broken-access-control-vulnerability?_s_id=cve -

20 Jan 2026, 15:17

Type Values Removed Values Added
References
  • {'url': 'https://vdp.patchstack.com/database/wordpress/plugin/wb-sticky-notes/vulnerability/wordpress-sticky-notes-for-wp-dashboard-plugin-1-2-4-broken-access-control-vulnerability?_s_id=cve', 'source': 'audit@patchstack.com'}
  • () https://patchstack.com/database/wordpress/plugin/wb-sticky-notes/vulnerability/wordpress-sticky-notes-for-wp-dashboard-plugin-1-2-4-broken-access-control-vulnerability?_s_id=cve -

31 Dec 2025, 16:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-12-31 16:15

Updated : 2026-04-01 17:27


NVD link : CVE-2025-62087

Mitre link : CVE-2025-62087

CVE.ORG link : CVE-2025-62087


JSON object : View

Products Affected

No product.

CWE
CWE-862

Missing Authorization