Plugin icon

SureDash – Community, Courses & Member Dashboard

suredash

Vulnerabilities:

9

Last Updated:

October 2, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
SureDash < 1.12.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter
Fixed in
Fixed in 1.12.1
CVSS
6.4 (medium)
Published
2026-10-09
Title
SureDash < 1.12.2 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content
Fixed in
Fixed in 1.12.2
CVSS
6.4 (medium)
Published
2026-08-15
Title
SureDash < 1.10.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute
Fixed in
Fixed in 1.10.4
CVSS
5.5 (medium)
Published
2026-08-10
Title
SureDash – Community, Courses & Member Dashboard < 1.10.2 - Unauthenticated Stored Cross-Site Scripting
Fixed in
Fixed in 1.10.2
CVSS
7.2 (high)
Published
2026-07-23
Title
SureDash < 1.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes
Fixed in
Fixed in 1.10.1
CVSS
5.5 (medium)
Published
2026-07-08
Title
SureDash – Community, Courses & Member Dashboard < 1.8.1 - Authenticated (SureDash User+) Arbitrary File Deletion
Fixed in
Fixed in 1.8.1
CVSS
8.1 (high)
Published
2026-06-17
Title
SureDash – Community, Courses & Member Dashboard < 1.8.1 - Authenticated (Subscriber+) SQL Injection
Fixed in
Fixed in 1.8.1
CVSS
6.5 (medium)
Published
2025-07-31
Title
SureDash < 1.2.0 - Authenticated (Subscriber+) Information Disclosure
Fixed in
Fixed in 1.2.0
CVSS
4.3 (medium)
Published
2025-07-28
Title
SureDash < 1.1.0 - Subscriber+ Privilege Escalation
Fixed in
Fixed in 1.1.0
CVSS
8.8 (high)