Wpextended Vulnerabilities

The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4. This is due to the `isDashboardOrProfileRequest()` method in the Menu Editor module using an insecure `strpos()` check against `$_SERVER['REQUEST_URI']` to determine...

CVSS:

8.8

Affected:

up to 3.2.4

Fixed in:

3.2.5

Disclosed:

Mar 21, 2026

CVE-2026-4314 on NVD →

The WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 3.0.15 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web...

CVSS:

6.4

Affected:

up to 3.0.15

Fixed in:

3.0.16

Disclosed:

May 27, 2025

CVE-2025-4963 on NVD →

[en] Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended allows Reflected XSS. This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a through 3.0.14.

Affected:

up to 3.0.15

Fixed in:

3.0.15

Disclosed:

Apr 1, 2025

CVE-2025-30796 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in all versions up to, and including, 3.0.14 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages tha...

CVSS:

6.1

Affected:

up to 3.0.14

Fixed in:

3.0.15

Disclosed:

Mar 27, 2025

CVE-2025-30796 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorder_route() function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder posts.

Affected:

up to 3.0.14

Fixed in:

3.0.14

Disclosed:

Feb 12, 2025

CVE-2024-13554 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reorder_route() function in all versions up to, and including, 3.0.13. This makes it possible for unauthenticated attackers to reorder posts.

CVSS:

5.3

Affected:

up to 3.0.13

Fixed in:

3.0.14

Disclosed:

Feb 11, 2025

CVE-2024-13554 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This...

Affected:

up to 3.0.13

Fixed in:

3.0.13

Disclosed:

Jan 18, 2025

CVE-2024-13184 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes...

CVSS:

7.5

Affected:

up to 3.0.12

Fixed in:

3.0.13

Disclosed:

Jan 17, 2025

CVE-2024-13184 on NVD →

[en] The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. This is due to a missing capability check on the 'wpext_handle_snippet_update' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute...

Affected:

up to 3.0.12

Fixed in:

3.0.12

Disclosed:

Jan 8, 2025

CVE-2024-11816 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification and retrieval of data due to a missing capability check on several functions in all versions up to, and including, 3.0.11. This makes it possible for authenticated attackers, with subscriber-level acces...

Affected:

up to 3.0.12

Fixed in:

3.0.12

Disclosed:

Jan 8, 2025

CVE-2024-11916 on NVD →

The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. This is due to a missing capability check on the 'wpext_handle_snippet_update' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute code...

CVSS:

8.8

Affected:

up to 3.0.11

Fixed in:

3.0.12

Disclosed:

Jan 7, 2025

CVE-2024-11816 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification and retrieval of data due to a missing capability check on several functions in all versions up to, and including, 3.0.11. This makes it possible for authenticated attackers, with subscriber-level access and...

CVSS:

7.4

Affected:

up to 3.0.11

Fixed in:

3.0.12

Disclosed:

Jan 7, 2025

CVE-2024-11916 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpext-export' parameter in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inje...

Affected:

up to 3.0.10

Fixed in:

3.0.10

Disclosed:

Oct 17, 2024

CVE-2024-9347 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpext-export' parameter in all versions up to, and including, 3.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject ar...

CVSS:

6.1

Affected:

up to 3.0.9, 2.0.12 – 2.0.12, 3.0.11 – 3.0.11

Fixed in:

3.0.10

Disclosed:

Oct 16, 2024

CVE-2024-9347 on NVD →

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended allows Reflected XSS.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a through 3.0.8.

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Oct 5, 2024

CVE-2024-47386 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that exe...

CVSS:

6.1

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 30, 2024

CVE-2024-47386 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber...

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Sep 4, 2024

CVE-2024-8121 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.8 via the download_user_ajax function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive dat...

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Sep 4, 2024

CVE-2024-8106 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.0.8 via the duplicate_post function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributo...

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Sep 4, 2024

CVE-2024-8123 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘selected_option’ parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to i...

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Sep 4, 2024

CVE-2024-8117 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0.8 via the download_file_ajax function. This makes it possible for authenticated attackers, with subscriber access and above, to read the contents of arbitrary files o...

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Sep 4, 2024

CVE-2024-8104 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitra...

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Sep 4, 2024

CVE-2024-8119 on NVD →

[en] The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions up to, and including, 3.0.8. This makes it possible for authentic...

Affected:

up to 3.0.9

Fixed in:

3.0.9

Disclosed:

Sep 4, 2024

CVE-2024-8102 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.0.8 via the download_file_ajax function. This makes it possible for authenticated attackers, with subscriber access and above, to read the contents of arbitrary files on the...

CVSS:

8.8

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 3, 2024

CVE-2024-8104 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated...

CVSS:

8.8

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 3, 2024

CVE-2024-8102 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.8 via the download_user_ajax function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract sensitive data inc...

CVSS:

6.5

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 3, 2024

CVE-2024-8106 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary we...

CVSS:

6.1

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 3, 2024

CVE-2024-8119 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘selected_option’ parameter in all versions up to, and including, 3.0.8 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject...

CVSS:

6.1

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 3, 2024

CVE-2024-8117 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a missing capability check on the wpext_change_admin_name() function in all versions up to, and including, 3.0.8. This makes it possible for authenticated attackers, with Subscriber-leve...

CVSS:

5.4

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 3, 2024

CVE-2024-8121 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.0.8 via the duplicate_post function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Contributor-lev...

CVSS:

5.4

Affected:

up to 3.0.8

Fixed in:

3.0.9

Disclosed:

Sep 3, 2024

CVE-2024-8123 on NVD →

[en] Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended allows Reflected XSS.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a through 2.4.7.

Affected:

up to 3.0.0

Fixed in:

3.0.0

Disclosed:

Jul 22, 2024

CVE-2024-37259 on NVD →

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including, 2.4.7 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will e...

CVSS:

6.1

Affected:

up to 2.4.7

Fixed in:

3.0.0

Disclosed:

Jun 27, 2024

CVE-2024-37259 on NVD →

Affected:

up to 3.0.16

Fixed in:

3.0.16

CVE-2025-4963 on NVD →