CVE-2023-49822: WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location

WordPress Ultimate Dashboard plugin <= 3.7.10 - Secret Login Page Location Disclosure on Multisites vulnerability

Status

Published

2024-06-04

Updated

2026-04-28

Assigning organization

Patchstack

Description

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in David Vongries Ultimate Dashboard allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Ultimate Dashboard: from n/a through 3.7.10.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

David Vongries Ultimate Dashboard

Default version status: unaffected

n/a to ≤ 3.7.10affected

References

https://patchstack.com/database/vulnerability/ultimate-dashboard/wordpress-ultimate-dashboard-plugin-3-7-10-secret-login-page-location-disclosure-on-multisites-vulnerability?_s_id=cve ↗