WordPress – Ultimate Dashboard exposed API Key
Ultimate Dashboard allows to replace the default WordPress dashboard widgets with your own and give the WordPress dashboard a more meaningful use.
Since at least version 3.8.3 an exposed MailerLite API key has existed allowing an attacker to interact with the MailerLite API, which could potentially lead to spam, phishing attacks, or other malicious activities. It also allows access to subscriber information, as shown in the screenshot below.
