Ultimate Dashboard

Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation vulnerability <= 3.8.7

Cross Site Scripting (XSS) vulnerability <= 3.7.11

Secret Login Page Location Disclosure on Multisites vulnerability <= 3.7.10

Authenticated (Administrator+) Stored CrossSite Scripting via plugin settings vulnerability <= 3.7.7

Authenticated(Administrator+) Stored CrossSite Scripting via plugin settings vulnerability < 3.7.6