Sign in Free account Free scan

davidvongries records

5 published records for vendor davidvongries.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 60%
Median publish → KEV: No record has entered KEV

Records by year

23
25

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5

The weakness classes this vendor ships most often: where to look.

Attack profile

XSS 5

All records

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
19Monitor	CVE-2023-50828No exploit	WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS)davidvongries · ultimate dashboard · CWE-79 XSS	Medium4.8	—	0.4%	Dec 21, 2023
19Monitor	CVE-2023-4726No exploit	Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settingsdavidvongries · ultimate dashboard · CWE-79 XSS	Medium4.8	—	0.3%	Nov 22, 2023
14Monitor	CVE-2025-1523No exploit	Ultimate Dashboard < 3.8.6 - Admin+ Stored XSSdavidvongries · ultimate dashboard · CWE-79 XSS	Low3.5	—	0.2%	Apr 17, 2025
14Monitor	CVE-2025-1524No exploit	Ultimate Dashboard < 3.8.6 - Admin+ Stored XSSdavidvongries · ultimate dashboard · CWE-79 XSS	Low3.5	—	0.2%	Apr 17, 2025
14Monitor	CVE-2025-1525No exploit	Ultimate Dashboard < 3.8.6 - Admin+ Stored XSSdavidvongries · ultimate dashboard · CWE-79 XSS	Low3.5	—	0.2%	Apr 17, 2025

CVE-2023-50828
19Monitor
WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
davidvongries · ultimate dashboardDec 21, 2023
CVE-2023-4726
19Monitor
Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
MediumCVSS 4.8No exploitEPSS 0%
- XSS
davidvongries · ultimate dashboardNov 22, 2023
CVE-2025-1523
14Monitor
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
LowCVSS 3.5No exploitEPSS 0%
- XSS
davidvongries · ultimate dashboardApr 17, 2025
CVE-2025-1524
14Monitor
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
LowCVSS 3.5No exploitEPSS 0%
- XSS
davidvongries · ultimate dashboardApr 17, 2025
CVE-2025-1525
14Monitor
Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS
LowCVSS 3.5No exploitEPSS 0%
- XSS
davidvongries · ultimate dashboardApr 17, 2025