Login Request a demo
SD
Product
System Dashboard
by Bowo · last CVE Feb 25, 2025
10
CVEs
0
On KEV
6.1
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 0Medium 10Low 0
Severity
All severities10Critical0High0Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add System Dashboard to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-12299
6.1
0%
Jan 30
System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter
Affected: through 2.8.15
CVE-2024-11107
6.1
0%
Dec 10
System Dashboard < 2.8.15 - Unauthenticated Stored XSS
Affected: before 2.8.15
CVE-2023-7246
5.4
1%
Mar 20
The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform…
Affected: before 2.8.10
CVE-2024-10708
4.9
2%
Dec 10
System Dashboard < 2.8.15 - Admin+ Path Traversal
Affected: before 2.8.15
CVE-2025-26911
4.3
0%
Feb 25
WordPress System Dashboard plugin <= 2.8.18 - Sensitive Data Exposure vulnerability
Affected: through 2.8.18
CVE-2023-5714
4.3
0%
Dec 7
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_db_specs() function hooked via an AJAX action in…
Affected: through 2.8.7
CVE-2023-5713
4.3
0%
Dec 7
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_option_value() function hooked via an AJAX…
Affected: through 2.8.7
CVE-2023-5712
4.3
0%
Dec 7
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_global_value() function hooked via an AJAX…
Affected: through 2.8.7
CVE-2023-5711
4.3
0%
Dec 7
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_php_info() function hooked via an AJAX action in…
Affected: through 2.8.7
CVE-2023-5710
4.3
0%
Dec 7
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_constants() function hooked via an AJAX action…
Affected: through 2.8.7
Showing 10