cbcvebase.

Wpextended Ultimate Wordpress Toolkit vulnerabilities

1 known vulnerability affecting wpextended/ultimate_wordpress_toolkit.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH1

Vulnerabilities

Page 1 of 1
CVE-2024-11816P3HIGHCVSS 8.8fixed in 3.0.122025-01-08
CVE-2024-11816 [HIGH] CWE-862 CVE-2024-11816: The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execu The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. This is due to a missing capability check on the 'wpext_handle_snippet_update' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code on the server providing an admin
nvd
Wpextended Ultimate Wordpress Toolkit vulnerabilities | cvebase