TI-2025-13355 CVE-2025-14615 · GHSA-7cf2-rc28-965vDASHBOARD BUILDER <= 1.5.7 - Cross-Site Request Forgery to SQL InjectionPriority LOW 30The DASHBOARD BUILDER – WordPress plugin for Charts and Graphs plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.7.CVSS 3.1HIGH 7.1· Network · No auth · User interaction · EPSS 0.00161 · Published 2026-01-14 · No fix listed CWE-352