Skip to content
OpenAdvisories

Vendor

qriouslad

14 known vulnerabilities.

Products

System Dashboard 7 Debug Log Manager – Conveniently Monitor and Inspect Errors 4 Code Explorer 2 Admin and Site Enhancements (ASE) 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2025-10377 Public exploit

    System Dashboard <= 2.8.20 - Cross-Site Request Forgery

    The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sd_toggle_logs() function. This makes it possible for unauthenticated attackers …

    qriouslad System Dashboard Web / CMS