Access violation vulnerability in WPDash Notes 1.3.5

The WPDash Notes plugin for WordPress has a security issue that could allow unauthorized people to see private information. This is because a certain function, called ‘wp_ajax_post_it_list_comment’, does not have the proper checks in place to prevent this from happening. This means that anyone with a Subscriber account or higher could potentially view comments on any post, including ones that are meant to be private or have a password, as well as posts that are still being worked on. The company behind the plugin has released a partial fix in version 1.3.5, but the vulnerability still exists.