Skip to contentWpextended The Ultimate Wordpress Toolkit – Wp Extended vulnerabilities
- wp extended the ultimate wordpress toolkit – wp extendedWordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.4.2 - Broken Access Control vulnerabilityCVE-2026-1234814.3 Medium
- wpextended the ultimate wordpress toolkit – wp extendedThe Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor ModuleCVE-2026-43148.8 High
- wpextended the ultimate wordpress toolkit – wp extendedWP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File UploadCVE-2025-49636.4 Medium
- wp extended the ultimate wordpress toolkit – wp extendedWordPress The Ultimate WordPress Toolkit – WP Extended plugin <= 3.0.14 - Cross Site Scripting (XSS) vulnerabilityCVE-2025-307967.1 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order ManipulationCVE-2024-135545.3 Medium
- wpextended the ultimate wordpress toolkit – wp extendedThe Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts ModuleCVE-2024-13184Public exploit7.5 High
- wpextended the ultimate wordpress toolkit – wp extended, ultimate wordpress toolkit +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code ExecutionCVE-2024-118168.8 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site ScriptingCVE-2024-119167.4 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site ScriptingCVE-2024-93476.1 Medium
- wp extended the ultimate wordpress toolkit – wp extendedWordPress WP Extended plugin <= 3.0.8 - Reflected Cross Site Scripting (XSS) vulnerabilityCVE-2024-473867.1 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username ChangeCVE-2024-81215.4 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object ReferenceCVE-2024-81235.4 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options UpdateCVE-2024-81028.8 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via pageCVE-2024-81196.1 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information ExposureCVE-2024-81066.5 Medium
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File DownloadCVE-2024-81048.8 High
- wpextended the ultimate wordpress toolkit – wp extended, wp extended +1 moreThe Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_optionCVE-2024-81176.1 Medium
- wp extended the ultimate wordpress toolkit – wp extended, wpextended wp extended +1 moreWordPress WP Extended plugin <= 2.4.7 - Cross Site Scripting (XSS) vulnerabilityCVE-2024-372597.1 High