wpextended The Ultimate WordPress Toolkit – WP Extended

CVE-2026-4314 High 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module 0.3%
CVE-2025-4963 Medium 6.4 WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload 0.3%
CVE-2024-13554 Medium 5.3 The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation 0.3%
CVE-2024-13184 High 7.5 The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module 0.5%
CVE-2024-11816 High 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution 0.8%
CVE-2024-11916 High 7.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting 0.2%
CVE-2024-9347 Medium 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting 0.5%
CVE-2024-8121 Medium 5.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change 0.3%
CVE-2024-8123 Medium 5.4 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference 0.3%
CVE-2024-8102 High 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update 0.5%
CVE-2024-8106 Medium 6.5 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure 0.5%
CVE-2024-8119 Medium 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page 0.4%
CVE-2024-8104 High 8.8 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download 1.0%
CVE-2024-8117 Medium 6.1 The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option 0.4%