CyberSecBulletin

Solacewp vulnerabilities

We track 2 vulnerabilities in Solacewp products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 16, 2026.

2vulnerabilities
2critical
0high
0exploited
9.5average CVSS score

Latest Solacewp vulnerabilities

  • 9.1 Critical severity

    Solace Extra: Missing Authorization

    CVE-2026-18316Solacewp

    The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versions up to, and including, 1.6.0. The handler is registered on both wp_ajax_action-import-zi

  • 9.9 Critical severity

    Solace Extra: Unrestricted Upload of File with Dangerous Type

    CVE-2025-32652Solacewp

    Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extra: from n/a through <= 1.3.1.