What is CVE-2026-6079?

CVE-2026-6079 is a high-severity vulnerability in Ho3einie Material Dashboard, classified under Missing Authorization. CVSS score: 7.3/10. Published 2026-08-05.

How severe is CVE-2026-6079?

High severity. CVSS v3 base score is 7.3 out of 10.

Auth bypass in Ho3einie Material Dashboard

CVE-2026-6079

The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amd_ajax_target_task_manager() function in all versions up to, and including, 1.4.10. This makes it possible for unauthenticated attackers to enumerate all scheduled tasks (potentially exposing PII), execute arbitrary tasks, and delete any task via the public_amd_ajax_handler AJAX action.

Vulnerability class: Broken Access Control

EPSS: 0.004 (33.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.

Affected products

Ho3einie Material Dashboard — versions 0

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

Frequently asked questions

What is CVE-2026-6079?: CVE-2026-6079 is a high-severity vulnerability in Ho3einie Material Dashboard, classified under Missing Authorization. CVSS score: 7.3/10. Published 2026-08-05.
How severe is CVE-2026-6079?: High severity. CVSS v3 base score is 7.3 out of 10.