Live › vulnerability › CVE-2026-115605
SureDash, a WordPress plugin by Brainstorm Force, has a missing authorization check that lets access control settings be exploited. The sources do not say what data or actions an attacker gains beyond that.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 15:25 UTC. All times on this page are UTC.
Sites running the SureDash WordPress plugin up to and including version 1.12.3, per the NVD entry. The sources do not describe the exact configuration or role needed to exploit it, so whether a logged-out visitor can reach it is unknown.
No product ranges from the sources yet.
1.12.3; the sources list versions through 1.12.3 as affected.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.3.
This page as .md · .json · in your agent: get_signal("CVE-2026-115605")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.