Wpextended vulnerabilities
We track 4 vulnerabilities in Wpextended products across 3 products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on March 22, 2026.
Latest Wpextended vulnerabilities
- 8.8 High severity
The Ultimate WordPress Toolkit – WP Extended: Improper Privilege Management
The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4. This is due to the `isDashboardOrProfileRequest()` method in the Menu Editor module using an insecure `st
- 7.5 High severity
The Ultimate WordPress Toolkit – WP Extended: Improper Neutralization of Special Elements used in an SQL Command
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of s
- 8.8 High severity
The Ultimate WordPress Toolkit – WP Extended: Missing Authorization
The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. This is due to a missing capability check on the 'wpext_handle_snippet_update' function. This makes it possible for authenticated attack
- 8.8 High severity
The Ultimate WordPress Toolkit – WP Extended: Missing Authorization
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions up to, and