Brainstorm Force SureDash vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Brainstorm Force SureDash: 3 record(s), with affected versions and fixes.

CVE-2026-66698 High · 7.1 CWE-79 Aug 13, 2026

WordPress SureDash plugin <= 1.10.1 - Cross Site Scripting (XSS) vulnerability

Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.

CVE-2026-57401 Critical · 9.9 CWE-22 Jul 13, 2026

WordPress SureDash plugin <= 1.8.0 - Arbitrary File Deletion vulnerability

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through <= 1.8.0.

CVE-2026-54813 High · 8.5 CWE-89 Jun 17, 2026

WordPress SureDash plugin <= 1.8.0 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Brainstorm Force SureDash allows Blind SQL Injection. This issue affects SureDash: from n/a through 1.8.0.