Extended Post Status

Extended Post Status has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 5.4, and the most serious one scores 5.4 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Extended Post Status has a vendor fix available, so running the current release closes it.

All of these findings were reported by TaeEun Lee. Extended Post Status is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium

5.4/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Extended Post Status vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.4CVE-2023-32094

Extended Post Status <= 1.0.19 - Missing Authorization via wp_insert_post_data

Read the full analysis

Vulnerability Records

1 records


2023-06-02 00:00	Extended Post Status <= 1.0.19 - Missing Authorization via wp_insert_post_data Extended Post Status <= 1.0.19	`CVE-2023-32094`	5.4 Medium	TaeEun Lee	Yes

Showing 1–1 of 1 reports

Latestv1.1.1

Extended Post Status

Author

Felix W.

4.5(11)

90/100

Last Updated

2026-09-01 (13d ago)

Active Installs

1,000+

Downloads

28,441

Requires WP

5.0+

Requires PHP

7.2+

Tested up to

WP 7.1

Created

2018-11-28 (8y ago)

This plugin provides the option to add new statuses to the backend and define the system relevant status settings. You can add/edit statuses just as categories or tags. All statuses are available for all your post types. You will find a new menu item located in the settings admin menu. For the sake of understanding, this plugin minimally changes messages, translations and workflow in Gutenberg Editor!

View on WordPress.org