Wpextended Wp Extended — known CVE vulnerabilities

Every CVE whose affected-product data names Wpextended Wp Extended, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (11)

• CVE-2024-8104 — CVSS 8.8 (high): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and…
• CVE-2024-8102 — CVSS 8.8 (high): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to…
• CVE-2024-11916 — CVSS 7.4 (high): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification and retrieval of data…
• CVE-2024-37259 — CVSS 7.1 (high): Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP Extended The Ultimate WordPress…
• CVE-2024-8106 — CVSS 6.5 (medium): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up…
• CVE-2024-8117 — CVSS 6.1 (medium): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
• CVE-2024-8119 — CVSS 6.1 (medium): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the page…
• CVE-2024-9347 — CVSS 6.1 (medium): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the…
• CVE-2024-8121 — CVSS 5.4 (medium): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of user names due to a…
• CVE-2024-8123 — CVSS 5.4 (medium): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions…
• CVE-2024-13554 — CVSS 5.3 (medium): The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data due to a missing…