SZB-8234f2fd34
EUVD flags authorization bypass in OpenStation WordPress plugin (CVSS 4.3)
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- OpenStation
- Product
- OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA
- First seen
Summary
The EUVD (ENISA) database has published EUVD-2026-114226 for the OpenStation WordPress plugin, versions up to and including 1.1.16. The entry describes an authorization bypass.
If you use OpenStation
Update OpenStation to a version newer than 1.1.16
Review admin dashboard user roles and permissions
Deactivate the plugin if no patch is available
What the sources say 1
· Mastodon: “The OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.1.16.” Source