Wpextended The Ultimate Wordpress Toolkit Wp Extended vulnerabilities

CVE-2026-4314 [HIGH] CWE-269 CVE-2026-4314: The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege E The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4. This is due to the `isDashboardOrProfileRequest()` method in the Menu Editor module using an insecure `strpos()` check against `$_SERVER['REQUEST_URI']` to determine if a request targets the dashboard

CVE-2024-8102 [HIGH] CWE-862 CVE-2024-8102: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level acc

CVE-2024-11816 [HIGH] CWE-862 CVE-2024-11816: The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execu The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. This is due to a missing capability check on the 'wpext_handle_snippet_update' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server providing an admin

CVE-2024-13184 [HIGH] CWE-89 CVE-2024-13184: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQ The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated at

CVE-2024-8104 [MEDIUM] CWE-22 CVE-2024-8104: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Tra The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0.8 via the download_file_ajax function. This makes it possible for authenticated attackers, with subscriber access and above, to read the contents of arbitrary files on the server, which can contain sensiti

CVE-2024-8106 [MEDIUM] CWE-200 CVE-2024-8106: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Inf The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.8 via the download_user_ajax function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data including usernames, hashed password

CVE-2025-4963 [MEDIUM] CWE-79 CVE-2025-4963: The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploa The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute

CVE-2024-8123 [MEDIUM] CWE-639 CVE-2024-8123: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Dire The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.0.8 via the duplicate_post function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-level access and above, to duplicate

CVE-2024-13554 [MEDIUM] CWE-862 CVE-2024-13554: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorder_route() function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder posts.

CVE-2024-11916 [MEDIUM] CWE-862 CVE-2024-11916: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification and retrieval of data due to a missing capability check on several functions in all versions up to, and including, 3.0.11. This makes it possible for authenticated attackers, with subscriber-level access and above, to import and activate a

CVE-2024-9347 [MEDIUM] CWE-79 CVE-2024-9347: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cro The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpext-export' parameter in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that

CVE-2024-8117 [MEDIUM] CWE-79 CVE-2024-8117: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cro The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘selected_option’ parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages th

CVE-2024-8119 [MEDIUM] CWE-79 CVE-2024-8119: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cro The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if

CVE-2024-8121 [MEDIUM] CWE-862 CVE-2024-8121: The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change an a