Solacewp

7 CVEs across 2 Solacewp products. Browse Solacewp vulnerabilities, severities, and proof-of-concept exploits.

Solacewp products with known CVEs

ProductCVEs
Solace Extra6
Solace1
Solacewp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-18316Critical9.12026-08-16The Solace Extra plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the import_zip() functio…
CVE-2026-27535High7.12026-08-13Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions.
CVE-2026-13250Medium5.32026-07-11The Solace Extra plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.3. This is due to the plugin not properly…
CVE-2025-68911Medium6.52026-01-22Missing Authorization vulnerability in solacewp Solace solace allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Solace…
CVE-2025-58203Medium4.42025-08-27Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from…
CVE-2025-47464Medium4.92025-05-07Server-Side Request Forgery (SSRF) vulnerability in solacewp Solace Extra solace-extra allows Server Side Request Forgery.This issue affects Solace Extra: from…
CVE-2025-32652Critical9.92025-04-17Unrestricted Upload of File with Dangerous Type vulnerability in solacewp Solace Extra solace-extra allows Using Malicious Files.This issue affects Solace Extr…