Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: solacewp Clear all filters
TI-2026-15067 CVE-2026-18316 · GHSA-xw86-2976-mc83

Missing authorization in solacewp Solace Extra

Priority MEDIUM 46

The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() function in versions up to, and including, 1.6.0.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00598 Published 2026-08-16 No fix listed CWE-862
TI-2026-11254 CVE-2026-13250 · GHSA-7cwh-6w47-pj4w

Missing authorization in solacewp Solace Extra

Priority LOW 31

The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00474 Published 2026-07-11 No fix listed CWE-862
TI-2025-42369 CVE-2025-68911 · GHSA-jhxx-jxcx-hxjh

WordPress Solace theme <= 2.1.16 - Broken Access Control vulnerability

Priority LOW 29

Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Solace: from n/a through <= 2.1.16.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00345 Published 2026-01-22 No fix listed CWE-862
TI-2025-23717 CVE-2025-32652 · GHSA-4fvv-p7qg-xmc7

WordPress Solace Extra plugin <= 1.3.1 - Arbitrary File Upload vulnerability

Priority MEDIUM 43

Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extra: from n/a through <= 1.3.1.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00443 Published 2025-04-17 No fix listed CWE-434