Swiss Toolkit For WP vulnerabilities

2 known vulnerabilities in Swiss Toolkit For WP from Wpmessiah. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Swiss Toolkit For WP: Unrestricted Upload of File with Dangerous Type

  CVE-2026-2354Jul 11, 2026Wpmessiah

  The Swiss Toolkit For WP plugin for WordPress is vulnerable to arbitrary file upload due to a flawed file type validation bypass in the `upload_extension_files()` function in all versions up to, and including, 1.4.6. The `upload_extension_files()` function hoo

• 8.8 High severity

  Swiss Toolkit For WP: Authentication Bypass Using an Alternate Path or Channel

  CVE-2024-5204May 29, 2024Wpmessiah

  The Swiss Toolkit For WP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.7. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible for authenticated