Solace Extra Vulnerabilities

The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versions up to, and including, 1.6.0. The handler is registered on both wp_ajax_action-import-zip and wp_ajax_nopriv_action-import-zip and only verifies the...

CVSS:

9.1

Affected:

up to 1.6.0

Fixed in:

1.6.1

Disclosed:

Aug 15, 2026

CVE-2026-18316 on NVD →

The Solace Extra plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 1.6.0

Fixed in:

1.6.1

Disclosed:

Aug 11, 2026

CVE-2026-27535 on NVD →

The Solace Extra plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 1.6.0

Fixed in:

1.6.1

Disclosed:

Aug 3, 2026

CVE-2026-16948 on NVD →

The Solace Extra plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions up to, and including, 1.6.0. This makes it possible for authenticated attackers, with subscriber-level access and above, to perform an unauthorized action.

CVSS:

4.3

Affected:

up to 1.6.0

Fixed in:

1.6.1

Disclosed:

Aug 3, 2026

CVE-2026-16965 on NVD →

The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to permanently delete all content previously impo...

CVSS:

5.3

Affected:

up to 1.5.3

Fixed in:

1.6.0

Disclosed:

Jul 10, 2026

CVE-2026-13250 on NVD →

The Solace Extra plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.2. This makes it possible for authenticated attackers, with Administrator-level access and above, to make web requests to arbitrary locations originating from the web application which can be use...

CVSS:

6.4

Affected:

up to 1.3.2

Fixed in:

1.3.3

Disclosed:

Aug 27, 2025

CVE-2025-58203 on NVD →

[en] Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra allows Server Side Request Forgery. This issue affects Solace Extra: from n/a through 1.3.2.

Affected:

up to 1.3.3

Fixed in:

1.3.3

Disclosed:

Aug 27, 2025

CVE-2025-58203 on NVD →

The Solace Extra plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to make web requests to arbitrary locations originating from the web application which can be used t...

CVSS:

6.4

Affected:

up to 1.3.1

Fixed in:

1.3.2

Disclosed:

May 7, 2025

CVE-2025-47464 on NVD →

[en] Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra allows Server Side Request Forgery. This issue affects Solace Extra: from n/a through 1.3.1.

Affected:

up to 1.3.2

Fixed in:

1.3.2

Disclosed:

May 7, 2025

CVE-2025-47464 on NVD →

[en] Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra allows Using Malicious Files. This issue affects Solace Extra: from n/a through 1.3.1.

Affected:

up to 1.3.2

Fixed in:

1.3.2

Disclosed:

Apr 17, 2025

CVE-2025-32652 on NVD →

The Solace Extra plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in all versions up to, and including, 1.3.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may mak...

CVSS:

8.8

Affected:

up to 1.3.1

Fixed in:

1.3.2

Disclosed:

Apr 10, 2025

CVE-2025-32652 on NVD →

The Solace Extra plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download_and_update_logo_logo_from_live_url() function in all versions up to, and including, 1.3.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to uplo...

CVSS:

8.8

Affected:

up to 1.3.0

Fixed in:

1.3.1

Disclosed:

Mar 6, 2025

<p>WordPress Solace Extra Plugin <= 1.3.0 is vulnerable to Arbitrary File Upload</p><p>Software: Solace Extra</p><p>Fixed in version 1.3.1 </p><p>Affected Version <= 1.3.0</p>

Affected:

up to 1.3.1

Fixed in:

1.3.1

Disclosed:

Mar 6, 2025

The Solace Extra plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the download_and_update_logo_logo_from_live_url() function in all versions up to, and including, 1.3.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to uplo...

Affected:

up to 1.3.1

Fixed in:

1.3.1