Advisories · Technology
Solace Extra.
Every CVE that names Solace Extra among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Solace Extra < 1.7.2 - Unauthenticated Non-Published Post Content Disclosure via Preview Routes
- Solace Extra
- Information disclosure
- CVSS 5.3 Medium
Solace Extra < 1.7.0 - Unauthenticated Draft/Private Site Builder Content Disclosure via get_elementor_content
- Solace Extra
- Information disclosure
- CVSS 4.3 Medium
Solace Extra < 1.6.1 - Subscriber+ Post Meta Update via solace_update_sitebuilder_status
- Solace Extra
- Cross-site request forgery (CSRF)
- Broken access control
- CVSS 8.1 High
Solace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wide Nonce Exposure
- Solace Extra
- Broken access control