Dashboard Widgets Suite
Dashboard Widgets Suite has 3 disclosed vulnerabilities in the WordSec catalog, reported between 2023 and 2024; all 3 are fixed as of September 2026. Their average CVSS score is 5.0, and the most serious one scores 6.1 out of 10. 2023 was the busiest year with 2 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (100%).
Every one of the 3 issues recorded for Dashboard Widgets Suite has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, one record each. Dashboard Widgets Suite is installed on roughly 4,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2024-0979Dashboard Widgets Suite <= 3.4.3 - Reflected Cross-Site Scripting
Read the full analysisVulnerability Records

Dashboard Widgets Suite
Author
Jeff Starr
1 Plugin. 9 Widgets. Awesome Dashboard. Add new widgets to your WordPress Dashboard. Streamline your workflow and optimize productivity. Widgets Dashboard Widgets Suite provides awesome widgets that you can add to your Dashboard with a click: Control Panel – Control widgets directly from the Dashboard User Notes – Add, edit, delete notes for any user role Feed Box – Display and customize any RSS Feed Social Box – Display social links from Twitter, Facebook, etc. List Box – Display custom lists created via the Menu screen Widget Box – Display any theme or WP widget (e.g., Search, Text) System Info – Display basic or advanced system information Debug Log – Display, customize, reset your WP debug log PHP Error Log – Display, customize, reset your server error log Each widget includes its own set of options for customizing display 🙂 The notes widget is super awesome, designed for serious note takers. You can choose from 3 note formats: Text, HTML, or Code. Check out Installation for more about the User Notes Widget. Suggest a widget! Features Dashboard Widgets Suite provides a slick set of useful Dashboard widgets with some great features: Includes 9 awesome Dashboard widgets Easy to set up and customize options Regularly updated and “future proof” Secure, clean, error-free code Built with the WordPress API Lightweight, fast and flexible Focused on performance, loads only enabled widgets Enable/disable widgets via Dashboard or plugin settings Option to restore 1-column display for the Dashboard Shortcodes to display widgets on the frontend Many options for customizing widget display Works perfectly with or without Gutenberg Check out the Screenshots for more details. Suggest a feature! Privacy This plugin does not collect or store any user data. It does not set any cookies, and it does not connect to any third-party locations. Thus, this plugin does not affect user privacy in any way. Dashboard Widgets Suite is developed and maintained by Jeff Starr, 15-year WordPress developer and book author. Support development I develop and maintain this free plugin with love for the WordPress community. To show support, you can make a donation or purchase one of my books: The Tao of WordPress Digging into WordPress .htaccess made easy WordPress Themes In Depth Wizard’s SQL Recipes for WordPress And/or purchase one of my premium WordPress plugins: BBQ Pro – Blazing fast WordPress firewall Blackhole Pro – Automatically block bad bots Banhammer Pro – Monitor traffic and ban the bad guys GA Google Analytics Pro – Connect WordPress to Google Analytics Head Meta Pro – Ultimate Meta Tags for WordPress REST Pro Tools – Awesome tools for managing the WP REST API Simple Ajax Chat Pro – Unlimited chat rooms USP Pro – Unlimited front-end forms Links, tweets and likes also appreciated. Thank you! 🙂
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C