Davidvongries Ultimate Dashboard Custom Wordpress Dashboard vulnerabilities

CVE-2025-2276 [MEDIUM] CWE-862 CVE-2025-2276: The Ultimate Dashboard – Custom WordPress Dashboard plugin for WordPress is vulnerable to unauthoriz The Ultimate Dashboard – Custom WordPress Dashboard plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handle_module_actions function in all versions up to, and including, 3.8.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate/deactiva

CVE-2023-4726 [MEDIUM] CWE-79 CVE-2023-4726: The Ultimate Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin s The Ultimate Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 3.7.7. due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that