Skip to content
OpenAdvisories
Low · 3.7 CVE-2023-49822 EUVD-2023-53730GHSA-x3gj-pq53-p235

WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability

Published Jun 4, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: David Vongries Product: Ultimate Dashboard

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10.

Affected products

VendorProductAffectedFixed
David Vongries Ultimate Dashboard ≤ 3.7.10 —

References