CVE-2023-4726

The CVE-2023-4726 entry describes a Stored Cross-Site Scripting (XSS) vulnerability in the WordPress plugin Ultimate Dashboard, affecting versions up to 3.7.7. The issue arises from insufficient input sanitization and output escaping in admin settings, allowing authenticated administrators (and a...

CVE-2025-1523

The Ultimate Dashboard WordPress plugin (versions prior to 3.8.6 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the failure to properly sanitise and escape certain plugin settings. This flaw allows high-privilege users, such as administrators, to execute maliciou...

CVE-2023-50828

CVE-2023-50828 corresponds to an authentication‑required, stored XSS vulnerability in the WordPress plugin Ultimate Dashboard – Custom WordPress Dashboard. The Red Hat entry confirms affected software up to version 3.7.11 and notes the issue as stored cross‑site scripting via settings, with an un...

CVE-2025-1525

The Ultimate Dashboard WordPress plugin (versions prior to 3.8.6 ) is vulnerable to Stored Cross-Site Scripting (XSS) . The root cause is the lack of proper sanitization and escaping for certain plugin settings. This flaw allows high-privilege users, such as administrators, to perform XSS attacks...

CVE-2025-1524

The Ultimate Dashboard WordPress plugin (versions prior to 3.8.6 ) is vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is the insufficient sanitization and escaping of certain plugin settings. This flaw allows high-privilege users, such as administrators, to execute XSS at...