Solace Extra (Unknown) - vulnerabilities (CVEs)

4 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-09-30. Vendor: Unknown.

CVEs of Solace Extra

• CVE-2026-80333 - CVSS 5.3 (medium), 2026-09-30: The Solace Extra WordPress plugin before 1.7.2 does not perform any authorization or post-status checks on its front-end preview routes, allowing…
• CVE-2026-16966 - CVSS 5.3 (medium), 2026-09-02: The Solace Extra WordPress plugin before 1.7.0 does not perform any authorization or post-status checks in one of its AJAX actions, allowing unauthenticated…
• CVE-2026-16965 - CVSS 4.3 (medium), 2026-08-09: The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as…
• CVE-2026-16948 - CVSS 8.1 (high), 2026-08-08: The Solace Extra WordPress plugin before 1.6.1 does not perform capability checks in several of its AJAX actions and exposes the nonce that protects them on…