Vulnerabilities

TI-2024-22236 CVE-2024-33652 · GHSA-7m76-8vv9-hcqm

WordPress Client Dash plugin <= 2.2.1 - Broken Access Control vulnerability

LOW 31

Missing Authorization vulnerability in Real Big Plugins Client Dash.This issue affects Client Dash: from n/a through 2.2.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0052 Published 2024-04-29 No fix listed CWE-862

TI-2023-26824 CVE-2023-49165 · GHSA-gmx2-638v-ppvf

WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Real Big Plugins Client Dash allows Stored XSS.This issue affects Client Dash: from n/a through 2.2.1.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00406 Published 2023-12-15 No fix listed CWE-79

TI-2019-12738 CVE-2019-17071 · GHSA-p6xm-f4v2-f9fv

The client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS.

LOW 29

The client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00941 Published 2019-10-10 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Client Dash plugin <= 2.2.1 - Broken Access Control vulnerability

WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)

The client-dash (aka Client Dash) plugin 2.1.4 for WordPress allows XSS.