Solacewp Solace vulnerabilities

• solacewp solace extra Solace Extra < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview Routes CVE-2026-80333 5.3 MediumSeptember 30, 2026
• solacewp solace extra Solace Extra < 1.7.0 - Unauthenticated Draft/Private Site Builder Content Disclosure via get_elementor_content CVE-2026-16966 5.3 MediumSeptember 2, 2026
• solacewp solace extra Solace Extra <= 1.6.0 - Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action CVE-2026-18316 9.1 CriticalAugust 16, 2026
• solacewp solace extra WordPress Solace Extra plugin <= 1.6.0 - Broken Access Control vulnerability CVE-2026-27535 7.1 HighAugust 13, 2026
• solacewp solace extra Solace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_status CVE-2026-16965 4.3 MediumAugust 9, 2026
• solacewp solace extra Solace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wide Nonce Exposure CVE-2026-16948 8.1 HighAugust 8, 2026
• solacewp solace extra Solace Extra <= 1.5.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion via delete_previously_imported AJAX Action CVE-2026-13250 5.3 MediumJuly 11, 2026
• solacewp solace WordPress Solace theme <= 2.1.16 - Broken Access Control vulnerability CVE-2025-68911 6.5 MediumJanuary 22, 2026
• solacewp solace extra WordPress Solace Extra Plugin <= 1.3.2 - Server Side Request Forgery (SSRF) Vulnerability CVE-2025-58203 4.4 MediumAugust 27, 2025
• solacewp solace extra WordPress Solace Extra plugin <= 1.3.1 - Server Side Request Forgery (SSRF) Vulnerability CVE-2025-47464 4.9 MediumMay 7, 2025
• solacewp solace extra WordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability CVE-2025-32652 9.9 CriticalApril 17, 2025