Every CVE whose affected-product data names Bowo System Dashboard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (9)
CVE-2024-11107 — CVSS 6.1 (medium): The System Dashboard WordPress plugin before 2.8.15 does not sanitise and escape some parameters when outputting them in the page, which…
CVE-2024-12299 — CVSS 6.1 (medium): The System Dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Filename parameter in all versions up to…
CVE-2023-7246 — CVSS 5.4 (medium): The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in…
CVE-2024-10708 — CVSS 4.9 (medium): The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users…
CVE-2023-5710 — CVSS 4.3 (medium): The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
CVE-2023-5714 — CVSS 4.3 (medium): The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
CVE-2023-5711 — CVSS 4.3 (medium): The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
CVE-2023-5712 — CVSS 4.3 (medium): The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…
CVE-2023-5713 — CVSS 4.3 (medium): The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the…