Vulnerabilities / SureDash
SureDash vulnerabilities
Advisories WPSec published for SureDash – Community, Courses & Member Dashboard. Other sources may list more. Its attack surface: SureDash on WPSec AttackSurface.
| Published | ID | Vulnerability | Severity | Fixed in |
|---|---|---|---|---|
| 2026-10-22 | WPSEC-2026-1430 | SureDash <= 1.12.2 - Unauthenticated Sensitive Information Exposure via Quick View 'post_id' Parameter | Medium 5.3 | 1.12.3 |
| 2026-10-22 | WPSEC-2026-1429 | SureDash <= 1.12.2 - Authenticated (Subscriber+) Sensitive Information Exposure via Unapproved Comments in Comment Lists | Medium 4.3 | 1.12.3 |
| 2026-10-22 | WPSEC-2026-1428 | SureDash <= 1.12.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via Community Posts, Comments, and Profile Bio | Medium 5.4 | 1.12.3 |
| 2026-10-22 | WPSEC-2026-1427 | SureDash <= 1.12.2 - Unauthenticated Sensitive Information Exposure via REST API Community Posts and Comments | Medium 5.3 | 1.12.3 |
| 2026-10-22 | WPSEC-2026-1426 | SureDash <= 1.12.2 - Authenticated (Subscriber+) Blind Server-Side Request Forgery via Image Source in Community Posts | Medium 6.4 | 1.12.3 |
| 2026-10-01 | WPSEC-2026-0098 | SureDash <= 1.12.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User Name Fields | Medium 6.4 | 1.12.1 |
License: CC BY 4.0