WordPress plugin

Solace Extra security & vulnerabilities

Q: Does Solace Extra have known vulnerabilities?

Yes. VulnCrest Radar lists 11 known vulnerabilities in Solace Extra: 1 critical, 2 high, 8 medium. None are known to affect version null.

Q: How do I check which version of Solace Extra I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

Q: What is the most recent Solace Extra vulnerability?

CVE-2026-80333, published Sep 28, 2026: Solace Extra <= 1.7.1 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).

Q: Is any Solace Extra vulnerability listed in CISA KEV?

No. None of the known Solace Extra vulnerabilities is currently listed in the CISA KEV catalog.

solace-extra— active installsLast vulnerability Sep 28, 2026

No known unpatched vulnerabilities in the latest version

All 11 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.

Watch plugin

11Known vulnerabilities

Critical1
High2
Medium8
Low0

Vulnerabilities per year

All Solace Extra vulnerabilities

Solace Extra vulnerabilities
Severity	Vulnerability	CVE	Published
Medium5.3	Unauthenticated Information Exposure ≤1.7.1Update to 1.7.2	CVE-2026-80333	Sep 28
Medium5.3	Missing Authorization to Unauthenticated Unpublished Site Builder Content Disclosure <1.7.0Update to 1.7.0	CVE-2026-16966	Aug 31
Critical9.1	Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action ≤1.6.0Update to 1.6.1	CVE-2026-18316	Aug 15
Medium4.3	Missing Authorization ≤1.6.0Update to 1.6.1	CVE-2026-27535	Aug 11
Medium4.3	Missing Authorization ≤1.6.0Update to 1.6.1	CVE-2026-16965	Aug 03
Medium4.3	Missing Authorization ≤1.6.0Update to 1.6.1	CVE-2026-16948	Aug 03
Medium5.3	Missing Authorization to Unauthenticated Arbitrary Content Deletion via delete_previously_imported AJAX Action ≤1.5.3Update to 1.6.0	CVE-2026-13250	Jul 10
Medium6.4	Authenticated (Admin+) Server-Side Request Forgery ≤1.3.2Update to 1.3.3	CVE-2025-58203	Aug 27, 2025
Medium6.4	Authenticated (Subscriber+) Server-Side Request Forgery ≤1.3.1Update to 1.3.2	CVE-2025-47464	May 7, 2025
High8.8	Authenticated (Subscriber+) Arbitrary File Upload ≤1.3.1Update to 1.3.2	CVE-2025-32652	Apr 10, 2025
High8.8	Authenticated (Subscriber+) Arbitrary File Upload ≤1.3.0Update to 1.3.1	—	Mar 6, 2025

Medium5.3
Unauthenticated Information Exposure
≤1.7.1Update to 1.7.2
CVE-2026-80333Sep 28
Medium5.3
Missing Authorization to Unauthenticated Unpublished Site Builder Content Disclosure
<1.7.0Update to 1.7.0
CVE-2026-16966Aug 31
Critical9.1
Missing Authorization to Unauthenticated Site Content Deletion and Unauthorized Demo Import via action-import-zip AJAX Action
≤1.6.0Update to 1.6.1
CVE-2026-18316Aug 15
Medium4.3
Missing Authorization
≤1.6.0Update to 1.6.1
CVE-2026-27535Aug 11
Medium4.3
Missing Authorization
≤1.6.0Update to 1.6.1
CVE-2026-16965Aug 03
Medium4.3
Missing Authorization
≤1.6.0Update to 1.6.1
CVE-2026-16948Aug 03
Medium5.3
Missing Authorization to Unauthenticated Arbitrary Content Deletion via delete_previously_imported AJAX Action
≤1.5.3Update to 1.6.0
CVE-2026-13250Jul 10
Medium6.4
Authenticated (Admin+) Server-Side Request Forgery
≤1.3.2Update to 1.3.3
CVE-2025-58203Aug 27, 2025
Medium6.4
Authenticated (Subscriber+) Server-Side Request Forgery
≤1.3.1Update to 1.3.2
CVE-2025-47464May 7, 2025
High8.8
Authenticated (Subscriber+) Arbitrary File Upload
≤1.3.1Update to 1.3.2
CVE-2025-32652Apr 10, 2025
High8.8
Authenticated (Subscriber+) Arbitrary File Upload
≤1.3.0Update to 1.3.1
8b11a4ce-9e11-4c4b-8c61-3de05750f568Mar 6, 2025

Solace Extra: common questions

Does Solace Extra have known vulnerabilities?

Yes. VulnCrest Radar lists 11 known vulnerabilities in Solace Extra: 1 critical, 2 high, 8 medium. None are known to affect version null.

How do I check which version of Solace Extra I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Solace Extra vulnerability?

CVE-2026-80333, published Sep 28, 2026: Solace Extra <= 1.7.1 - Unauthenticated Information Exposure. Severity: Medium (CVSS 5.3).

Is any Solace Extra vulnerability listed in CISA KEV?

No. None of the known Solace Extra vulnerabilities is currently listed in the CISA KEV catalog.