📦 Wp Extended

The WP Extended WordPress plugin has a missing capability check vulnerability that allows authenticated attackers with subscriber-level access or higher to import and activate arbitrary code snippets....

This vulnerability in the WP Extended WordPress plugin allows authenticated attackers with Subscriber-level access or higher to modify arbitrary WordPress site options due to missing capability checks...

This vulnerability allows attackers to inject malicious scripts into web pages generated by the WP Extended plugin, which could execute in users' browsers. It affects WordPress sites using the WP Exte...

The WP Extended WordPress plugin has an authorization bypass vulnerability that allows unauthenticated attackers to reorder posts. This affects all WordPress sites using WP Extended plugin versions up...

This vulnerability in the WP Extended WordPress plugin allows authenticated attackers with Contributor-level access or higher to duplicate posts created by other users, including administrators. Attac...

This vulnerability in the WP Extended WordPress plugin allows authenticated attackers with Subscriber-level access or higher to extract sensitive user data including usernames, hashed passwords, and e...

This vulnerability allows unauthenticated attackers to inject malicious scripts via the page parameter in the WP Extended WordPress plugin. When a user clicks a specially crafted link, the script exec...