Skip to content
OpenAdvisories

Product · qriouslad

System Dashboard

7 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.3
    CVE-2025-10377 Public exploit

    System Dashboard <= 2.8.20 - Cross-Site Request Forgery

    The System Dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.8.20. This is due to missing nonce validation on the sd_toggle_logs() function. This makes it possible for unauthenticated attackers …

    qriouslad System Dashboard Web / CMS
  • Medium 6.1
    CVE-2024-12299

    System Dashboard <= 2.8.17 - Reflected Cross-Site Scripting via Filename Parameter

    The System Dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the Filename parameter in all versions up to, and including, 2.8.17 due to insufficient input sanitization and output escaping. This makes it possible for unauthenti…

    qriouslad System Dashboard Web / CMS
  • Medium 4.3
    CVE-2023-5710

    System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_constants)

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_constants() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authentic…

    qriouslad System Dashboard Web / CMS
  • Medium 4.3
    CVE-2023-5713

    System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_option_value)

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_option_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authen…

    qriouslad System Dashboard Web / CMS
  • Medium 4.3
    CVE-2023-5712

    System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_global_value)

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_global_value() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authen…

    qriouslad System Dashboard Web / CMS
  • Medium 4.3
    CVE-2023-5714

    System Dashboard <= 2.8.7 - Missing Authorization to Information Disclosure (sd_db_specs)

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_db_specs() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authentica…

    qriouslad System Dashboard Web / CMS
  • Medium 4.3
    CVE-2023-5711

    System Dashboard <= 2.8.8 - Missing Authorization to Information Disclosure (sd_php_info)

    The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the sd_php_info() function hooked via an AJAX action in all versions up to, and including, 2.8.7. This makes it possible for authentica…

    qriouslad System Dashboard Web / CMS