wpextended

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

wpextended records in CISA KEV

No wpextended vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Ultimate Wordpress Toolkit · all components

TI-2024-10960 CVE-2024-11816 · GHSA-9vrq-rwr6-5xww

MEDIUM 41

The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00774 Published 2025-01-08 No fix listed CWE-862