WordPress security by component
Solace Extra
Plugin description
Solace Extra is a WordPress component with 4 published CVE records in this archive. The latest tracked vulnerability was published Jul 11, 2026; the highest CVE/CNA score is 9.9.
Plugin slug:
solace-extraLatest vulnerability
CVE-2026-13250: Solace Extra: A security weakness
Solace Extra is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.5.3.
| Safe version |
|
||
|---|---|---|---|
| Jul 11, 2026 |
CVE-2026-13250
Solace Extra: A security weakness
Solace Extra is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation. The published affected range is <= 1.5.3.
|
> 1.5.3 |
CVE5.3
NVDPending
|
| Aug 27, 2025 |
CVE-2025-58203
Solace Extra: Server-side request forgery
Solace Extra is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
|
See mitigation notes |
CVE4.4
NVDPending
|
| May 07, 2025 |
CVE-2025-47464
Solace Extra: Server-side request forgery
Solace Extra is affected by server-side request forgery. Exposure depends on how the affected operation is made reachable by the site. The vulnerable server can be induced to make attacker-selected network requests.
|
See mitigation notes |
CVE4.9
NVDPending
|
| Apr 17, 2025 |
CVE-2025-32652
Solace Extra: Dangerous file upload
Solace Extra is affected by dangerous file upload. Exposure depends on how the affected operation is made reachable by the site. Successful exploitation can place attacker-controlled executable content on the server and may lead to full site compromise.
|
See mitigation notes |
CVE9.9
NVDPending
|