Live › vulnerability › CVE-2026-110892
Go to dashboardSureDash, a WordPress plugin from Brainstorm Force, has a missing authorization check in versions up to 1.12.2. An attacker with access to the affected function may be able to act beyond their permissions.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-24 08:47 UTC. All times on this page are UTC.
Sites running the SureDash WordPress plugin at version or earlier are in scope. The sources do not say which SureDash features or configurations make a site reachable, so the exact exposure is unknown. Sites that do not have SureDash installed can skip this.
1.12.2No product ranges from the sources yet.
wp plugin get suredash --field=versionwp plugin is-active suredash1.12.2, per the vendor's patched release (the exact fixed version is unknown from the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-110892")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.