CVE-2026-110894: WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
Published Oct 22, 2026
·Updated
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
Affected Software
1 affected component
Brainstorm Force SureDash<=1.12.2
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SureDashto a version that resolves this vulnerability.Fixed in 1.12.3
Event History
Oct 22, 2026
CVE Published
via MITRE·07:32 AM
Data Sourced
via MITRE·07:32 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
Which SureDash installations are affected?
SureDash versions through 1.12.2 are affected. The available data does not identify a safe fixed version.
2
Does exploiting this issue require authentication or user interaction?
No. The CVSS vector indicates network-reachable exploitation with no privileges required and no user interaction required.
3
What is the expected impact if the vulnerability is exploited?
The reported impact is limited confidentiality loss. The provided severity vector reports no integrity or availability impact.