Ultimate Dashboard

Admin+ Stored XSS vulnerability < 3.8.6

Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation vulnerability <= 3.8.7

Cross Site Scripting (XSS) vulnerability <= 3.7.11

Secret Login Page Location Disclosure on Multisites vulnerability <= 3.7.10

Authenticated (Administrator+) Stored CrossSite Scripting via plugin settings vulnerability <= 3.7.7