Arbitrary File Deletion Vulnerability in SureDash by SureDash
CVE-2026-115604

5MEDIUM

Key Information:

Vendor

WordPress
Status
Suredash
Vendor
CVE Published:
30 October 2026

What is CVE-2026-115604?

SureDash versions up to 1.12.3 are susceptible to an arbitrary file deletion vulnerability. This issue allows an authenticated attacker to delete arbitrary files on the server, potentially leading to data loss or disruption of services. Implementing security best practices is essential to mitigate such risks and ensure the integrity of application files.

Affected Version(s)

SureDash <= 1.12.3

References

https://patchstack.com/database/wordpress/plugin/suredash...
vdb-entry

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

yzx001 | Patchstack Bug Bounty Program
.