CVE-2018-11092: Admin Notes Project Admin Notes

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

An issue was discovered in the Admin Notes plugin 1.1 for MyBB. CSRF allows an attacker to remotely delete all admin notes via an admin/index.php?empty=table (aka Clear Table) action.

Affected products

• Admin Notes Project Admin Notes: version 1.1 only

Published 2018-05-21. Last modified 2026-06-17.