Log in Start free

davidvongries

Products

ProductCVEsExploitedLatest
Ultimate Dashboard – Custom WordPress Dashboard3–May 1, 2026

Exploited and recent CVEs

  • CVE-2026-3140 Medium 4.3 Ultimate Dashboard <= 3.8.14 - Cross-Site Request Forgery to Module Activation/Deactivation 0.2%
  • CVE-2025-2276 Medium 4.3 Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation 0.2%
  • CVE-2023-4726 Medium 4.4 Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings 0.4%