Known vulnerabilities in the Ultimate Dashboard plugin
8 security advisories have been published for the Ultimate Dashboard plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- Ultimate Dashboard - Cross-Site Request Forgery (CSRF) (CVE-2026-3140) MEDIUM
- Ultimate Dashboard - Cross-Site Scripting (XSS) (CVE-2025-1525) LOW
- Ultimate Dashboard - Cross-Site Scripting (XSS) (CVE-2025-1524) LOW
- Ultimate Dashboard - Cross-Site Scripting (XSS) (CVE-2025-1523) LOW
- Ultimate Dashboard - Broken Access Control (CVE-2025-2276) MEDIUM
- Ultimate Dashboard - Cross-Site Scripting (XSS) (CVE-2023-50828) MEDIUM
- Ultimate Dashboard - Cross-Site Scripting (XSS) (CVE-2023-4726) MEDIUM
- Ultimate Dashboard - Cross-Site Scripting (XSS) (CVE-2023-2812) MEDIUM