VendorsDavid Vongriesultimate_dashboardall versions
Vulnerabilities

David Vongries Ultimate Dashboard

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

5CVEs
CVE-2023-50828
WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS)
Published 2023-12-21 · Modified
5.9EPSS 0.004
CVE-2023-4726
Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Published 2023-11-22 · Modified
4.8EPSS 0.004
CVE-2025-1523
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Published 2025-04-17 · Analyzed
3.5EPSS 0.003
CVE-2025-1524
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Published 2025-04-17 · Analyzed
3.5EPSS 0.003
CVE-2025-1525
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
Published 2025-04-17 · Analyzed
3.5EPSS 0.003