CVE-2026-16948

HighCVSS 8.1

Published: 08/08/2026(UTC)Updated: 26/08/2026(UTC)Translated: 08/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

The Solace Extra WordPress plugin before version 1.6.1 does not perform capability checks in several AJAX actions and exposes the nonce protecting them on admin pages accessible to low-privileged users. This allows users with roles as low as Subscriber to modify site-wide presentation settings and delete imported site-builder content.

Risk Assessment

The risk includes unauthorized modification of site settings and content deletion, potentially leading to site disruption and data loss.

Recommendation

Update the Solace Extra plugin to version 1.6.1 or later, which includes capability check fixes.

Other vulnerabilities in Solace Extra WordPress plugin

CVE-2026-16965Medium
The Solace Extra WordPress plugin before version 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site's active templates.

Original NVD description (English source)

The Solace Extra WordPress plugin before 1.6.1 does not perform capability checks in several of its AJAX actions and exposes the nonce that protects them on admin pages reachable by low-privileged users, allowing users with a role as low as Subscriber to modify site-wide presentation settings and delete imported site-builder content.