Skip to content
Noroxi

Ultimate Dashboard – Custom WordPress Dashboard

ultimate-dashboard · plugin

Known security vulnerabilities for Ultimate Dashboard – Custom WordPress Dashboard. Find out in seconds which version runs on your site with WP Lens.

5 known vulnerabilities

latest May 1, 2026

Vulnerabilities

  • CVE-2023-50828

    WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS)

    Medium 4.8

  • CVE-2023-4726

    Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings

    Medium 4.8

  • CVE-2026-3140

    Ultimate Dashboard <= 3.8.14 - Cross-Site Request Forgery to Module Activation/Deactivation

    Medium 4.3

  • CVE-2025-2276

    Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation

    Medium 4.3

  • CVE-2023-49822

    WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability

    Low 3.7

← Back to directory