CVE-2026-16965
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
The Solace Extra WordPress plugin before version 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site's active templates.
Risk Assessment
The risk includes the possibility of unauthorized modification of content and site settings by users with low privileges, which may lead to defacement or disruption of operations.
Recommendation
It is recommended to immediately update the Solace Extra plugin to version 1.6.1 or later, which includes the security fix.
Original NVD description (English source)
The Solace Extra WordPress plugin before 1.6.1 does not perform capability or nonce checks in one of its AJAX actions, allowing any authenticated user such as a subscriber (and, via CSRF, any logged-in user) to update post meta on arbitrary posts and to deactivate the site's active templates.