Medium · 6.5 CVE-2025-54685 EUVD-2025-24709GHSA-x567-4ggx-q7g2

WordPress SureDash Plugin <= 1.1.0 - Sensitive Data Exposure Vulnerability

Published Aug 14, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Brainstorm Force Product: SureDash

Description

Insertion of Sensitive Information Into Sent Data vulnerability in Brainstorm Force SureDash suredash allows Retrieve Embedded Sensitive Data.This issue affects SureDash: from n/a through <= 1.1.0.

Affected products

Vendor	Product	Affected	Fixed
Brainstorm Force	SureDash	≤ 1.1.0	—

References

https://patchstack.com/database/Wordpress/Plugin/suredash/vulnerability/wordpress-suredash-plugin-1-1-0-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry