CVE-2026-110894Medium· 5.3▾ SunlitMissing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
▾ Sunlit zone — Low / medium · no exploitation signal
impact 29.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Missing Authorization vulnerability in Brainstorm Force SureDash suredash allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SureDash: from n/a through 1.12.2.
suredash <= 1.12.2Update the WordPress SureDash plugin to the latest available version (at least 1.12.3).
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-110893Medium· 5.3WordPress SureDash plugin <= 1.12.2 - Broken Access Control vulnerability
CVE-2026-39721Medium· 5.4Missing Authorization vulnerability in Brainstorm Force Starter Templates astra-sites allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Starter Templates: from n/a through 4.7.7.
CVE-2026-112241Critical· 9.8WordPress SureCart plugin <= 4.9.5 - Broken Authentication vulnerability
CVE-2026-112221High· 7.1WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-112840Medium· 6.5WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (XSS) vulnerability
CVE-2026-110372Critical· 9.8WordPress OttoKit plugin <= 1.1.40 - Privilege Escalation vulnerability