CVE-2025-2276

creationtimestamp| type| source ---|---|--- 2025-03-26 00:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8790 2025-03-26 01:05:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalqwqoyp2l 2025-03-26 03:51:26+00:00| seen| https://t.me/cvedetector/21...

CVE-2025-2276 Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation

The Ultimate Dashboard – Custom WordPress Dashboard plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handlemoduleactions function in all versions up to, and including, 3.8.7. This makes it possible for authenticated attackers, with...

CVE-2025-2276 Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation

The Ultimate Dashboard – Custom WordPress Dashboard plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the handlemoduleactions function in all versions up to, and including, 3.8.7. This makes it possible for authenticated attackers, with...