CVE-2026-54813: WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability
Published Jun 17, 2026
·Updated
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force SureDash allows Blind SQL Injection.
This issue affects SureDash: from n/a through 1.8.0.
Affected Software
1 affected component
Brainstorm Force SureDash<=1.8.0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress SureDash pluginto a version that resolves this vulnerability.Fixed in 1.8.1
Event History
Jun 17, 2026
CVE Published
via MITRE·01:44 PM
Data Sourced
via MITRE·01:44 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-54813?
The severity of CVE-2026-54813 is high, rated at 8.5 on the CVSS scale.
2
How do I fix CVE-2026-54813?
To fix CVE-2026-54813, update the Brainstorm Force SureDash plugin to version 1.8.1 or higher.
3
What type of vulnerability is CVE-2026-54813?
CVE-2026-54813 is an SQL Injection vulnerability that allows for Blind SQL Injection.
4
Which software is affected by CVE-2026-54813?
CVE-2026-54813 affects the Brainstorm Force SureDash plugin versions from n/a to 1.8.0.
5
When was CVE-2026-54813 published?
CVE-2026-54813 was published on June 17, 2026.