wpextended vulnerabilities
14 published CVEs name wpextended among the affected products.
- 14Published CVEs14 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-4314
The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module
wpextended · The Ultimate WordPress Toolkit – WP Extended
High8.8 - CVE-2025-4963
WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium6.4 - CVE-2024-13554
The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium5.3 - CVE-2024-13184
The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module
wpextended · The Ultimate WordPress Toolkit – WP Extended
High7.5 - CVE-2024-11816
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution
wpextended · The Ultimate WordPress Toolkit – WP Extended
High8.8 - CVE-2024-11916
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
wpextended · The Ultimate WordPress Toolkit – WP Extended
High7.4 - CVE-2024-9347
The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium6.1 - CVE-2024-8121
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium5.4 - CVE-2024-8123
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium5.4 - CVE-2024-8102
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update
wpextended · The Ultimate WordPress Toolkit – WP Extended
High8.8