Read the docs

solacewp

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

solacewp records in CISA KEV

No solacewp vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2026-15067 CVE-2026-18316 · GHSA-xw86-2976-mc83

Missing authorization in solacewp Solace Extra

Priority MEDIUM 46

The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versions up to, and including, 1.6.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00598 Published 2026-08-16 No fix listed CWE-862
TI-2025-23717 CVE-2025-32652 · GHSA-4fvv-p7qg-xmc7

WordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extra: from n/a through <= 1.3.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00443 Published 2025-04-17 No fix listed CWE-434
TI-2026-11254 CVE-2026-13250 · GHSA-7cwh-6w47-pj4w

Missing authorization in solacewp Solace Extra

Priority LOW 31

The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00474 Published 2026-07-11 No fix listed CWE-862
TI-2025-42369 CVE-2025-68911 · GHSA-jhxx-jxcx-hxjh

WordPress Solace theme <= 2.1.16 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Solace: from n/a through <= 2.1.16.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00345 Published 2026-01-22 No fix listed CWE-862
Open these records in search →