WordPress plugin
CE21 Suite security & vulnerabilities
Unpatched vulnerability in the latest version
At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.
- Critical5
- High0
- Medium1
- Low0
All CE21 Suite vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Unauthenticated Sensitive Information Exposure to Privilege Escalation ≤2.3.1No patch available | CVE-2025-11008 | |
| Critical9.8 | 2.3.1 - Missing Authorization to Unauthenticated Privilege Escalation via Plugin Settings Update 2.2.1 – 2.3.1No patch available | CVE-2025-11007 | |
| Critical9.8 | Unauthenticated Privilege Escalation ≤2.2.0Update to 2.2.1 | CVE-2024-54293 | |
| Critical9.8 | Authentication Bypass ≤2.2.0Update to 2.2.1 | CVE-2024-10284 | |
| Critical9.8 | JWT Token Disclosure ≤2.2.0No patch available | CVE-2024-10285 |
- Critical9.8Unauthenticated Sensitive Information Exposure to Privilege Escalation
≤2.3.1No patch available
- Critical9.82.3.1 - Missing Authorization to Unauthenticated Privilege Escalation via Plugin Settings Update
2.2.1 – 2.3.1No patch available
- Critical9.8Unauthenticated Privilege Escalation
≤2.2.0Update to 2.2.1
- Critical9.8Authentication Bypass
≤2.2.0Update to 2.2.1
- Critical9.8JWT Token Disclosure
≤2.2.0No patch available
CE21 Suite: common questions
Does CE21 Suite have known vulnerabilities?
Yes. VulnCrest Radar lists 6 known vulnerabilities in CE21 Suite: 5 critical, 1 medium. At least one is not fixed in the latest version.
How do I check which version of CE21 Suite I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent CE21 Suite vulnerability?
CVE-2025-11008, published Nov 3, 2025: CE21 Suite <= 2.3.1 - Unauthenticated Sensitive Information Exposure to Privilege Escalation. Severity: Critical (CVSS 9.8).
Is any CE21 Suite vulnerability listed in CISA KEV?
No. None of the known CE21 Suite vulnerabilities is currently listed in the CISA KEV catalog.