Live › vulnerability › CVE-2026-110893
Go to dashboardSureDash, a WordPress plugin from Brainstorm Force, has a missing authorization check that allows access control settings to be exploited. The sources say the issue affects versions through 1.12.2 and carry a CVSS score of 5.3 with low exploitation probability.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running the SureDash WordPress plugin at version or earlier are affected. The sources do not say which configurations make a site exposed, so unknown for other setups.
1.12.2No product ranges from the sources yet.
1.12.2 or earlier is affected per the sources.1.12.2; the sources do not name the fixed version.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-110893")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.