wordpressdotorg OpenStation – Admin Dashboard Notes, Custom Dashboard, AI Assistant & PWA
- CVE-2026-109592 OpenStation: Desktop Windows, Dock & Virtual Desktops for WP Admin <= 1.1.16 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Placement Modification and Entity Metadata Disclosure via PATCH /files/placements/<id> on orphaned placements 0.3%