CVE-2026-18316Critical 9.1Solace Extra <= 1.6.0 - Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action0.6%
CVE-2026-27535High 7.1WordPress Solace Extra plugin <= 1.6.0 - Broken Access Control vulnerability0.3%
CVE-2026-13250Medium 5.3Solace Extra <= 1.5.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion via delete_previously_imported AJAX Action0.5%