CVE-2026-115605: WordPress SureDash plugin <= 1.12.3 - Broken Access Control vulnerability
Published Oct 29, 2026
·Updated
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.3.
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SureDash pluginto a version that resolves this vulnerability.Fixed in 1.12.4
Event History
Oct 29, 2026
CVE Published
via MITRE·02:29 PM
Data Sourced
via MITRE·02:29 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·03:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The CVSS vector indicates that exploitation is network-accessible and requires low-level privileges. No user interaction is required.
2
What is the security impact?
The issue can result in limited confidentiality impact. The provided CVSS information indicates no integrity or availability impact.
3
Which SureDash versions are affected?
SureDash versions through 1.12.3 are affected. The earliest affected version is not specified.