The Ultimate WordPress Toolkit – WP Extended vulnerabilities
4 known vulnerabilities in The Ultimate WordPress Toolkit – WP Extended from Wpextended. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
The Ultimate WordPress Toolkit – WP Extended: Improper Privilege Management
The 'The Ultimate WordPress Toolkit – WP Extended' plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.2.4. This is due to the `isDashboardOrProfileRequest()` method in the Menu Editor module using an insecure `st
- 7.5 High severity
The Ultimate WordPress Toolkit – WP Extended: Improper Neutralization of Special Elements used in an SQL Command
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to time-based SQL Injection via the Login Attempts module in all versions up to, and including, 3.0.12 due to insufficient escaping on the user supplied parameter and lack of s
- 8.8 High severity
The Ultimate WordPress Toolkit – WP Extended: Missing Authorization
The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. This is due to a missing capability check on the 'wpext_handle_snippet_update' function. This makes it possible for authenticated attack
- 8.8 High severity
The Ultimate WordPress Toolkit – WP Extended: Missing Authorization
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions up to, and