CVE-2026-110892: WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SureDash pluginto a version that resolves this vulnerability.Fixed in 1.12.3
Event History
Frequently Asked Questions
Who could exploit this issue?
An attacker must have low-level privileges on the affected site. Exploitation is network-accessible and does not require user interaction.
What is the likely security impact?
The vulnerability has high confidentiality impact, meaning successful exploitation could expose sensitive information. The supplied assessment indicates no integrity or availability impact.
Which versions are in scope?
The affected range is listed as SureDash versions through 1.12.2. No fixed version is identified in the provided data.