Solace Extra vulnerabilities

2 known vulnerabilities in Solace Extra from Solacewp. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.1 Critical severity

  Solace Extra: Missing Authorization

  CVE-2026-18316Aug 16, 2026Solacewp

  The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versions up to, and including, 1.6.0. The handler is registered on both wp_ajax_action-import-zi

• 9.9 Critical severity

  Solace Extra: Unrestricted Upload of File with Dangerous Type

  CVE-2025-32652Apr 17, 2025Solacewp

  Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extra: from n/a through <= 1.3.1.