Davidvongries Ultimate_dashboard
5 CVEs affecting Davidvongries Ultimate_dashboard. Latest disclosed: 2025-04-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50828 | Medium | 5.9 | 2023-12-21 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Vongries Ultimate Dashboard – Custom WordPress Dash… |
CVE-2023-4726 | Medium | 4.4 | 2023-11-22 | The Ultimate Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.7.7. due to ins… |
CVE-2025-1525 | Low | 3.5 | 2025-04-17 | The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t… |
CVE-2025-1524 | Low | 3.5 | 2025-04-17 | The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t… |
CVE-2025-1523 | Low | 3.5 | 2025-04-17 | The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t… |