Dashboard Widgets Suite Vulnerabilities

The Dashboard Widgets Suite plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'tab' parameter in all versions up to, and including, 3.4.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages t...

CVSS:

6.1

Affected:

up to 3.4.3

Fixed in:

3.4.4

Disclosed:

Jun 12, 2024

CVE-2024-0979 on NVD →

The Dashboard Widgets Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 3.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to...

CVSS:

4.4

Affected:

up to 3.4.1

Fixed in:

3.4.2

Disclosed:

Dec 4, 2023

CVE-2023-49743 on NVD →

The Dashboard Widgets Suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 3.2.1 via widget_notes_message due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with administrator-level access, and above, to inj...

CVSS:

4.4

Affected:

up to 3.2.1

Fixed in:

3.2.2

Disclosed:

Feb 27, 2023

CVE-2023-26517 on NVD →