WordPress User Extra Fields vulnerabilities

4 known vulnerabilities in WordPress User Extra Fields from Vanquish. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  WordPress User Extra Fields: Absolute Path Traversal

  CVE-2025-7846Oct 31, 2025Vanquish

  The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the save_fields() function in all versions up to, and including, 16.7. This makes it possible for authenticated attackers,

• 9.8 Critical severity

  WordPress User Extra Fields: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2024-11150Nov 13, 2024VanquishEPSS 1.39%

  The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 16.6. This makes it possible for unauthentic

• 8.8 High severity

  WordPress User Extra Fields: Missing Authorization

  CVE-2024-10800Nov 13, 2024Vanquish

  The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajax_save_fields() function in all versions up to, and including, 16.6. This makes it possible for authenticated attackers, with

• 9.8 Critical severity

  WordPress User Extra Fields: Unrestricted Upload of File with Dangerous Type

  CVE-2024-10801Nov 9, 2024Vanquish

  The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ajax_manage_file_chunk_upload() function in all versions up to, and including, 16.5. This makes it possible for unauthentica