Live › vulnerability › CVE-2026-110894
Go to dashboardSureDash, a WordPress plugin by Brainstorm Force, has a missing authorization check that lets a request reach functions it should restrict. The sources say an attacker can exploit incorrectly configured access control levels, and the affected range is all versions through 1.12.2.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Sites running SureDash 1.12.2 or older are in scope, according to the sources. Exposure depends on how access levels are configured on the site, which the sources do not detail. Sites without SureDash installed can skip it.
No product ranges from the sources yet.
wp plugin get suredash --field=version1.12.2 or older1.12.2, once the vendor publishes one (unknown in the sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
This page as .md · .json · in your agent: get_signal("CVE-2026-110894")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.