What’s Vulnerable › Products

brainstormforce SureDash – Community, Courses & Member Dashboard vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 4 published in the last 12 months.

Check whether your brainstormforce SureDash – Community, Courses & Member Dashboard version is affected

Latest brainstormforce SureDash – Community, Courses & Member Dashboard vulnerabilities

• CVE-2026-96870 — SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'display_name' Parameter (CVSS 6.4)
• CVE-2026-102774 — SureDash <= 1.12.1 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via Image 'alt' Attribute in Community Post Content (CVSS 6.4)
• CVE-2026-18402 — SureDash <= 1.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'draweropenverposition' Block/Shortcode Attribute (CVSS 6.4)
• CVE-2026-15821 — SureDash <= 1.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode Attributes (CVSS 6.4)