David Vongries
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Ultimate Dashboard | 1 | – | Jun 4, 2024 |
| Ultimate Dashboard – Custom WordPress Dashboard | 1 | – | Dec 21, 2023 |
| Welcome Email Editor | 1 | – | Dec 9, 2024 |
Exploited and recent CVEs
- CVE-2023-47756 WordPress Welcome Email Editor plugin <= 5.0.6 - Broken Access Control vulnerability 0.3%
- CVE-2023-49822 WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability 0.3%
- CVE-2023-50828 WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS) 0.4%