wpextended vulnerabilities
14 published CVEs name wpextended among the affected products.
- Published CVEs
- 14
- Last 12 months
- 1
- Critical
- 0
- Known exploited
- 0
Critical 0High 6Medium 8Low 0Not scored 0
CVEs per yearBy the year they were published
- 20248
- 20255
- 20261
Newest CVEs
- CVE-2026-4314
The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module
wpextended · The Ultimate WordPress Toolkit – WP Extended
High8.8 - CVE-2025-4963
WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium6.4 - CVE-2024-13554
The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium5.3 - CVE-2024-13184
The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module
wpextended · The Ultimate WordPress Toolkit – WP Extended
High7.5 - CVE-2024-11816
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution
wpextended · The Ultimate WordPress Toolkit – WP Extended
High8.8 - CVE-2024-11916
The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
wpextended · The Ultimate WordPress Toolkit – WP Extended
High7.4 - CVE-2024-9347
The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium6.1 - CVE-2024-8121
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium5.4 - CVE-2024-8123
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference
wpextended · The Ultimate WordPress Toolkit – WP Extended
Medium5.4 - CVE-2024-8102
The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update
wpextended · The Ultimate WordPress Toolkit – WP Extended
High8.8