WordPress Plugin Vulnerabilities

The Ultimate WordPress Toolkit – WP Extended < 3.0.12 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting

Description

The The Ultimate WordPress Toolkit – WP Extended plugin for WordPress is vulnerable to unauthorized modification and retrieval of data due to a missing capability check on several functions in all versions up to, and including, 3.0.11. This makes it possible for authenticated attackers, with subscriber-level access and above, to import and activate arbitrary code snippets along with

Affects Plugins

Plugin icon
wpextended
Fixed in 3.0.12

References

CVE
CVE-2024-11916
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/747d7649-bdf5-46d0-a496-59cb7eac77ac

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
7.4 (high)

Miscellaneous

Original Researcher
Lucio Sá
Verified
No
WPVDB ID
3b5c5cb1-1a2a-45e7-971c-1990ffedd1b1

Timeline

Publicly Published
2025-01-07 (about 1 year ago)
Added
2025-01-07 (about 1 year ago)
Last Updated
2025-01-08 (about 1 year ago)

Other

Published
Title
Published
2026-05-21
Title
MotoPress Hotel Booking < 6.0.2 - Missing Authorization to Unauthenticated Arbitrary Booking Notes Modification via mphb_update_booking_notes AJAX Action
Published
2025-03-27
Title
Traveler < 3.2.1 - Missing Authorization
Published
2026-06-29
Title
Business Directory Plugin – Easy Listing Directories for WordPress < 6.4.24 - Missing Authorization
Published
2026-03-02
Title
pixfort Core < 3.2.26 - Missing Authorization
Published
2026-08-26
Title
Post SMTP – Complete Email Deliverability and SMTP Solution with Email Logs, Alerts, Backup SMTP & Mobile App 4.0.0-beta.1 - Missing Authorization to Authenticated (Subscriber+) Settings Change