Futurio Extra
Futurio Extra has 8 disclosed vulnerabilities in the WordSec catalog, reported between 2022 and 2024; all 8 are fixed as of September 2026. Their average CVSS score is 5.5, and the most serious one scores 7.2 out of 10. Severity breakdown: 0 critical and 1 high. 2024 was the busiest year with 4 disclosures.
The most common weakness is Cross-Site Scripting, behind 3 of the records (38%). Other recurring categories include Cross-Site Request Forgery (CSRF), Authorization Bypass Through User-Controlled Key.
Every one of the 8 issues recorded for Futurio Extra has a vendor fix available, so running the current release closes all known holes.
6 independent researchers contributed these findings, most of them (2) reported by István Márton. Futurio Extra is installed on roughly 20,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.
CVE-2021-25109Futurio Extra <= 1.6.2 - Authenticated (Admin+) SQL Injection
Read the full analysisVulnerability Records

Futurio Extra
Author
FuturioWP
Futurio Extra add extra features and options to Futurio and Futurio Storefront theme. This plugin require the free WP theme – Futurio or Futurio Storefront – to be installed. Futurio Extra brings new widgets to be used in Elementor and allows you to import beautiful page templates for Elementor page builder. It also comes with 100% WooCommerce support and custom options. With the one click demo import feature you can import all our 10+ demo sites. Features: – One click demo import – import starter sites with one click. Demos here – Customizer options (Color presets, Google fonts, Layout desings…) – Page/post custom options and features – Custom Elementor widgets and addons – Custom widgets (social icons, about me, recent & popular posts) – 100% WooCommerce support and custom WooCommerce options and features – Custom Elementor 404 page How to? – Custom Elementor header How to? – Custom Elementor footer credits How to? – Custom Elementor blog feed builder How to? – And much more…. Documentation Page Builders Friend Futurio & Futurio Extra is best friend with the popular pagebuilders like Elementor, Beaver Builder, King Composer, Brizy, Visual Composer, SiteOrigin, Divi or Gutenberg. Custom look with Elementor With Elementor you can design your header, footer, 404 error page or the blog page look 20+ free demos sites 20+ free demo websites ready to import are included. Importing is easy with a few clicks. 100% WooCommerce support Extend the WooCommerce with new options and features. Import full WooCommerce demo websites with few clicks and be ready to start your new store in few minutes. Credits & Copyright Typed.js, Copyright 2014 Matt Bold Licenses: MIT Source: https://github.com/mattboldt/typed.js Kirki, Copyright (c) 2017, Aristeides Stathopoulos Licenses: MIT Source: https://github.com/aristath/kirki Dilaz Metabox, by WebDilaz Team Licenses: GPL-2.0+ Source: https://github.com/Rodgath/Dilaz-Metaboxes-Plugin
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C