Vulnerabilities > Wpextended > WP Extended > High

DATE CVE VULNERABILITY TITLE RISK
2024-09-04 CVE-2024-8102 Missing Authorization vulnerability in Wpextended WP Extended
The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the module_all_toggle_ajax() function in all versions up to, and including, 3.0.8.
network
low complexity
wpextended CWE-862
8.8