CVE-2026-110893: WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
Published Oct 22, 2026
·Updated
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
Affected Software
1 affected component
Brainstorm Force SureDash<=1.12.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SureDash pluginto a version that resolves this vulnerability.Fixed in 1.12.3
Event History
Oct 22, 2026
CVE Published
via MITRE·07:33 AM
Data Sourced
via MITRE·07:33 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which SureDash installations are affected?
SureDash versions through 1.12.2 are affected. The available data does not identify a safe fixed version.
2
Does exploitation require authentication or user interaction?
No. The supplied CVSS vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required.
3
What is the expected impact of successful exploitation?
The supplied severity data indicates low confidentiality impact, with no integrity or availability impact.