ho3einie vulnerabilities and threats

The Material Dashboard plugin for WordPress up to version 1.4.10 contains a missing authorization vulnerability in the amd_ajax_target_task_manager() function. This flaw allows unauthenticated attackers to enumerate, execute, and delete scheduled tasks via the public_amd_ajax_handler AJAX action, potentially exposing personally identifiable information (PII). The vulnerability is tracked as CVE-2026-6079 with a high severity rating.