Wpextended vulnerabilities

Products

• The Ultimate Wordpress Toolkit – Wp Extended 17
• Wp Extended 11

Newest

• wpextended the ultimate wordpress toolkit – wp extended The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module CVE-2026-4314 8.8 HighMarch 22, 2026
• wpextended the ultimate wordpress toolkit – wp extended WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2025-4963 6.4 MediumMay 28, 2025
• wp extended the ultimate wordpress toolkit – wp extended WordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.0.14 - Cross Site Scripting (XSS) vulnerability CVE-2025-30796 7.1 HighApril 1, 2025
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation CVE-2024-13554 5.3 MediumFebruary 12, 2025
• wpextended the ultimate wordpress toolkit – wp extended The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module CVE-2024-13184 Public exploit 7.5 HighJanuary 18, 2025
• wpextended the ultimate wordpress toolkit – wp extended, ultimate wordpress toolkit +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution CVE-2024-11816 8.8 HighJanuary 8, 2025
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVE-2024-11916 7.4 HighJanuary 8, 2025
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting CVE-2024-9347 6.1 MediumOctober 17, 2024
• wp extended the ultimate wordpress toolkit – wp extended WordPress WP Extended plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2024-47386 7.1 HighOctober 5, 2024
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change CVE-2024-8121 5.4 MediumSeptember 4, 2024
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference CVE-2024-8123 5.4 MediumSeptember 4, 2024
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update CVE-2024-8102 8.8 HighSeptember 4, 2024
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page CVE-2024-8119 6.1 MediumSeptember 4, 2024
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure CVE-2024-8106 6.5 MediumSeptember 4, 2024
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download CVE-2024-8104 8.8 HighSeptember 4, 2024
• wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 more The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option CVE-2024-8117 6.1 MediumSeptember 4, 2024
• wp extended the ultimate wordpress toolkit – wp extended, wpextended wp extended +1 more WordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerability CVE-2024-37259 7.1 HighJuly 22, 2024