Vulnerabilities > Wpextended > Ultimate Wordpress Toolkit
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2025-01-08 | CVE-2024-11816 | Missing Authorization vulnerability in Wpextended Ultimate Wordpress Toolkit The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to Remote Code Execution in version 3.0.11. | 8.8 |
2025-01-08 | CVE-2024-11916 | Cross-site Scripting vulnerability in Wpextended Ultimate Wordpress Toolkit The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification and retrieval of data due to a missing capability check on several functions in all versions up to, and including, 3.0.11. | 5.4 |