Extendify vulnerabilities
We track 2 vulnerabilities in Extendify products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 1, 2026.
2vulnerabilities
0critical
2high
0exploited
7.2average CVSS score
Latest Extendify vulnerabilities
- 7.2 High severity
Extendify: Improper Neutralization of Input During Web Page Generation
The Extendify plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'styles.blocks' Block Type Key in all versions up to, and including, 3.1.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticate
- 7.2 High severity
Gutenberg Block Editor Toolkit – EditorsKit: Unrestricted Upload of File with Dangerous Type
The EditorsKit plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation on the 'import_styles' function in versions up to, and including, 1.40.3. This makes it possible for authenticated attackers with administrator-leve