Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

davidvongries — Vulnerabilities & Security Advisories 3

Browse all 3 CVE security advisories affecting davidvongries. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Davidvongries focuses on web application security research, primarily identifying vulnerabilities in open-source software and enterprise applications. Historically, their findings center on remote code execution, cross-site scripting, and privilege escalation flaws, with three CVEs attributed to their work. Their research often involves thorough code analysis and fuzz testing to uncover complex security issues. While no major public incidents are directly linked to their work, their contributions to vulnerability databases demonstrate a consistent pattern of discovering critical flaws that could lead to system compromise or data breaches. Their findings typically follow responsible disclosure practices, working with vendors to remediate issues before public release.

CVE ID Title CVSS Severity Published
CVE-2026-3140 Ultimate Dashboard <= 3.8.14 - Cross-Site Request Forgery to Module Activation/Deactivation — Ultimate Dashboard – Custom WordPress Dashboard CWE-352 4.3 Medium 2026-05-01
CVE-2025-2276 Ultimate Dashboard <= 3.8.7 - Missing Authorization to Authenticated (Subscriber+) Plugin Modules Activation/Deactivation — Ultimate Dashboard – Custom WordPress Dashboard CWE-862 4.3 Medium 2025-03-25
CVE-2023-4726 Ultimate Dashboard <= 3.7.7 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings — Ultimate Dashboard – Custom WordPress Dashboard CWE-79 4.4 Medium 2023-11-22

This page lists every published CVE security advisory associated with davidvongries. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.