Skip to contentSolacewp Solace Extra vulnerabilities
- solacewp solace extraSolace Extra < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview RoutesCVE-2026-803335.3 Medium
- solacewp solace extraSolace Extra < 1.7.0 - Unauthenticated Draft/Private Site Builder Content Disclosure via get_elementor_contentCVE-2026-169665.3 Medium
- solacewp solace extraSolace Extra <= 1.6.0 - Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX ActionCVE-2026-183169.1 Critical
- solacewp solace extraWordPress Solace Extra plugin <= 1.6.0 - Broken Access Control vulnerabilityCVE-2026-275357.1 High
- solacewp solace extraSolace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_statusCVE-2026-169654.3 Medium
- solacewp solace extraSolace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wide Nonce ExposureCVE-2026-169488.1 High
- solacewp solace extraSolace Extra <= 1.5.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion via delete_previously_imported AJAX ActionCVE-2026-132505.3 Medium
- solacewp solace extraWordPress Solace Extra Plugin <= 1.3.2 - Server Side Request Forgery (SSRF) VulnerabilityCVE-2025-582034.4 Medium
- solacewp solace extraWordPress Solace Extra plugin <= 1.3.1 - Server Side Request Forgery (SSRF) VulnerabilityCVE-2025-474644.9 Medium
- solacewp solace extraWordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerabilityCVE-2025-326529.9 Critical