Davidvongries Ultimate Dashboard — known CVE vulnerabilities

Every CVE whose affected-product data names Davidvongries Ultimate Dashboard, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-50828 — CVSS 5.9 (medium): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Vongries Ultimate Dashboard –…
• CVE-2023-4726 — CVSS 4.4 (medium): The Ultimate Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and…
• CVE-2025-1523 — CVSS 3.5 (low): The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2025-1524 — CVSS 3.5 (low): The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege…
• CVE-2025-1525 — CVSS 3.5 (low): The Ultimate Dashboard WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege…