What’s Vulnerable › Products

Ultimate Dashboard vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Ultimate Dashboard version is affected

Latest Ultimate Dashboard vulnerabilities

• CVE-2026-3140 — Ultimate Dashboard <= 3.8.14 - Cross-Site Request Forgery to Module Activation/Deactivation (CVSS 4.3)
• CVE-2025-1525 — Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS (CVSS 3.5)
• CVE-2025-1524 — Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS (CVSS 3.5)
• CVE-2025-1523 — Ultimate Dashboard < 3.8.6 - Admin+ Stored XSS (CVSS 3.5)
• CVE-2025-2276 — Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation (CVSS 4.3)
• CVE-2023-50828 — WordPress Ultimate Dashboard Plugin <= 3.7.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-4726 — Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings (CVSS 4.8)