CVE-2023-7246

The System Dashboard WordPress plugin before version 2.8.10 is vulnerable to a Cross-Site Scripting (XSS) attack due to insufficient sanitization and escaping of certain parameters. Specifically, the flaw allows for header injection via the X-Forwarded-For header. In a multisite WordPress configu...

CVE-2024-10708

The System Dashboard WordPress plugin, in versions prior to 2.8.15 , is vulnerable to a path traversal attack due to a failure to validate user input used in a path. This flaw allows high-privilege users, such as administrators, to perform path traversal through the filename parameter in the sd_v...

CVE-2024-11107

The System Dashboard WordPress plugin versions prior to 2.8.15 are vulnerable to Cross-Site Scripting (XSS) . This vulnerability is caused by the plugin's failure to sanitize and escape certain parameters when they are outputted on a page. An unauthenticated user can exploit this flaw to perform ...