Vanquish User Extra Fields vulnerabilities

• vanquish user extra fields WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability CVE-2025-69377 7.7 HighFebruary 20, 2026
• vanquish user extra fields WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability CVE-2025-69376 8.6 HighFebruary 20, 2026
• vanquish user extra fields WordPress User Extra Fields plugin <= 16.8 - Cross Site Scripting (XSS) vulnerability CVE-2025-67991 7.1 HighFebruary 20, 2026
• vanquish user extra fields WordPress User Extra Fields plugin <= 16.8 - Broken Access Control vulnerability CVE-2025-67579 5.3 MediumDecember 9, 2025
• vanquish wordpress user extra fields WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function CVE-2025-7846 8.8 HighOctober 31, 2025
• vanquish user extra fields, wordpress user extra fields +1 more WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion CVE-2024-11150 9.8 CriticalNovember 13, 2024
• vanquish user extra fields, wordpress user extra fields +1 more WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation CVE-2024-10800 8.8 HighNovember 13, 2024
• vanquish wordpress user extra fields WordPress User Extra Fields <= 16.5 - Unauthenticated Arbitrary File Upload CVE-2024-10801 9.8 CriticalNovember 9, 2024