davidvongries Ultimate Dashboard – Custom WordPress Dashboard

• CVE-2026-3140 Medium 4.3 Ultimate Dashboard <= 3.8.14 - Cross-Site Request Forgery to Module Activation/Deactivation 0.2%
• CVE-2025-2276 Medium 4.3 Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation 0.2%
• CVE-2023-4726 Medium 4.4 Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings 0.4%