CVE-2026-57401
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk42th percentile - higher than 42% of all known CVEs
Summary
The SureDash WordPress plugin contains a path traversal vulnerability that allows an attacker to access files outside the restricted directory. The issue affects versions up to and including 1.8.0.
Risk Assessment
An attacker can read sensitive configuration files, user data, or other server resources, leading to information disclosure and potential attack escalation.
Recommendation
Immediately update the SureDash plugin to the latest available version that fixes this vulnerability. Also restrict file access permissions on the server.
Original NVD description (English source)
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Brainstorm Force SureDash suredash allows Path Traversal.This issue affects SureDash: from n/a through <= 1.8.0.