Plugin icon

System Dashboard

system-dashboard

Vulnerabilities:

11

Last Updated:

May 22, 2026

Active Installs:

1000

Published
Title
Fixed in
CVSS
Published
2025-09-25
Title
System Dashboard < 2.8.21 - Cross-Site Request Forgery
Fixed in
Fixed in 2.8.21
CVSS
4.3 (medium)
Published
2025-02-23
Title
System Dashboard < 2.8.19 - Authenticated (Subscriber+) Sensitive Information Exposure
Fixed in
Fixed in 2.8.19
CVSS
4.3 (medium)
Published
2025-01-30
Title
System Dashboard < 2.8.18 - Reflected Cross-Site Scripting via Filename Parameter
Fixed in
Fixed in 2.8.18
CVSS
6.1 (medium)
Published
2024-11-19
Title
System Dashboard < 2.8.15 - Unauthenticated Stored XSS
Fixed in
Fixed in 2.8.15
CVSS
8.8 (high)
Published
2024-11-19
Title
System Dashboard < 2.8.15 - Admin+ Path Traversal
Fixed in
Fixed in 2.8.15
CVSS
4.9 (medium)
Published
2024-02-28
Title
System Dashboard < 2.8.10 - XSS via Header Injection
Fixed in
Fixed in 2.8.10
CVSS
3.5 (low)
Published
2023-12-06
Title
System Dashboard < 2.8.8 - Missing Authorization to Information Disclosure (sd_option_value)
Fixed in
Fixed in 2.8.8
CVSS
4.3 (medium)
Published
2023-12-06
Title
System Dashboard < 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)
Fixed in
Fixed in 2.8.8
CVSS
4.3 (medium)
Published
2023-12-06
Title
System Dashboard < 2.8.8 - Missing Authorization to Information Disclosure (sd_global_value)
Fixed in
Fixed in 2.8.8
CVSS
4.3 (medium)
Published
2023-12-06
Title
System Dashboard < 2.8.8 - Missing Authorization to Information Disclosure (sd_constants)
Fixed in
Fixed in 2.8.8
CVSS
4.3 (medium)
Published
2023-12-06
Title
System Dashboard < 2.8.8 - Missing Authorization to Information Disclosure (sd_db_specs)
Fixed in
Fixed in 2.8.8
CVSS
4.3 (medium)