Davidvongries

Ultimate Dashboard

7 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
3.5

CVE-2025-1524

Exploit
  • EPSS 0.17%
  • Veröffentlicht 17.04.2025 06:00:10
  • Zuletzt bearbeitet 30.04.2025 15:47:00

The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is d...

3.5

CVE-2025-1525

Exploit
  • EPSS 0.17%
  • Veröffentlicht 17.04.2025 06:00:10
  • Zuletzt bearbeitet 30.04.2025 15:46:20

The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is d...

3.5

CVE-2025-1523

Exploit
  • EPSS 0.17%
  • Veröffentlicht 17.04.2025 06:00:09
  • Zuletzt bearbeitet 29.04.2025 19:06:48

The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is d...

4.3

CVE-2025-2276

  • EPSS 0.09%
  • Veröffentlicht 25.03.2025 23:22:00
  • Zuletzt bearbeitet 27.03.2025 16:45:46

The Ultimate Dashboard – Custom WordPress Dashboard plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_module_actions function in all versions up to, and including, 3.8.7. This make...

3.7

CVE-2023-49822

  • EPSS 0.57%
  • Veröffentlicht 04.06.2024 12:15:09
  • Zuletzt bearbeitet 21.11.2024 08:33:54

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10.

4.8

CVE-2023-50828

Exploit
  • EPSS 0.12%
  • Veröffentlicht 21.12.2023 15:15:12
  • Zuletzt bearbeitet 21.11.2024 08:37:21

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Vongries Ultimate Dashboard – Custom WordPress Dashboard allows Stored XSS.This issue affects Ultimate Dashboard – Custom WordPress Dashboard:...

4.8

CVE-2023-4726

  • EPSS 0.1%
  • Veröffentlicht 22.11.2023 16:15:09
  • Zuletzt bearbeitet 21.11.2024 08:35:50

The Ultimate Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.7.7. due to insufficient input sanitization and output escaping. This makes it possible for authenticated ...