Cross-Site Request Forgery in Dashboard Builder Plugin for WordPress

CVE-2025-14615

What is CVE-2025-14615?

The Dashboard Builder plugin for WordPress is prone to a Cross-Site Request Forgery vulnerability due to inadequate nonce validation in its settings handler. This flaw allows unauthenticated attackers to manipulate the SQL query and database credentials used by the shortcode [show-dashboardbuilder]. By tricking an administrator into performing unwanted actions, attackers can execute modified SQL queries upon rendering the shortcode, leading to potential SQL injection and unauthorized data access through visible chart outputs.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References