WordPress security by component

The Ultimate WordPress Toolkit – WP Extended

Plugin description

The Ultimate WordPress Toolkit – WP Extended is a WordPress component with 2 published CVE records in this archive. The latest tracked vulnerability was published Feb 12, 2025; the highest CVE/CNA score is 7.4.

Plugin slug: wp-extended

Latest vulnerability

CVE-2024-13554: The Ultimate WordPress Toolkit – WP Extended: A security weakness

The Ultimate WordPress Toolkit – WP Extended is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.

PublishedFeb 12, 2025

Safe version guidanceSee mitigation notes

		Safe version
Feb 12, 2025	CVE-2024-13554 The Ultimate WordPress Toolkit – WP Extended: A security weakness The Ultimate WordPress Toolkit – WP Extended is affected by a security weakness. The vulnerable path is reachable without authentication. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE5.3 NVDPending
Jan 08, 2025	CVE-2024-11916 The Ultimate WordPress Toolkit – WP Extended: A security weakness The Ultimate WordPress Toolkit – WP Extended is affected by a security weakness. Exploitation requires at least subscriber-level access. The resulting impact depends on how the affected component exposes the vulnerable operation.	See mitigation notes	CVE7.4 NVD5.4