WP Extended – The Ultimate WordPress Toolkit

Explore WP Extended – The Ultimate WordPress Toolkit vulnerabilities across all versions. Currently tracking 17 known vulnerabilities, including severity, impact, and patch status.

01234567891026.09.2022Today27.06.20246.1The Ultimate WordPress Toolkit – WP Extended <= 2.4.7 - Unauthenticated Stored Cross-Site Scripting CVSS 6.1 · 27.06.202403.09.20245.4The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Missing Authorization to Admin Username Change CVSS 5.4 · 03.09.20246.1The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via selected_option CVSS 6.1 · 03.09.20245.4The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Insecure Direct Object Reference CVSS 5.4 · 03.09.20248.8The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Arbitrary Options Update CVSS 8.8 · 03.09.20246.5The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Authenticated (Subscriber+) Sensitive Information Exposure CVSS 6.5 · 03.09.20246.1The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting via page CVSS 6.1 · 03.09.20248.8The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Directory Traversal to Authenticated (Subscriber+) Arbitrary File Download CVSS 8.8 · 03.09.202430.09.20246.1The Ultimate WordPress Toolkit – WP Extended <= 3.0.8 - Reflected Cross-Site Scripting CVSS 6.1 · 30.09.202416.10.20246.1The Ultimate WordPress Toolkit – WP Extended <= 3.0.9 - Reflected Cross-Site Scripting CVSS 6.1 · 16.10.202407.01.20257.4The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting CVSS 7.4 · 07.01.20258.8The Ultimate WordPress Toolkit – WP Extended <= 3.0.11 - Missing Authorization to Authenticated (Subscriber+) Remote Code Execution CVSS 8.8 · 07.01.202517.01.20257.5The Ultimate WordPress Toolkit – WP Extended <= 3.0.12 - Unauthenticated SQL Injection via Login Attempts Module CVSS 7.5 · 17.01.202511.02.20255.3The Ultimate WordPress Toolkit – WP Extended <= 3.0.13 - Missing Authorization to Unauthenticated Post Order Manipulation CVSS 5.3 · 11.02.202527.03.20256.1The Ultimate WordPress Toolkit – WP Extended <= 3.0.14 - Reflected Cross-Site Scripting CVSS 6.1 · 27.03.202527.05.20256.4WP Extended <= 3.0.15 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVSS 6.4 · 27.05.202521.03.20268.8The Ultimate WordPress Toolkit – WP Extended <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation via Menu Editor Module CVSS 8.8 · 21.03.2026

Strategic Overview

Avg CVSSMedium
6.8/ 10
Patch Coverage100%
Open

0

Fixed

17

Get automatic notifications for all WP Extended – The Ultimate WordPress Toolkit vulnerabilities before they are exploited.

Vulnerability Records

17 records
2026-03-21 14:34CVE-2026-4314
8.8
High
bashuYes
2025-05-27 20:29CVE-2025-4963
6.4
Medium
rajanhoyrYes
2025-03-27 00:00CVE-2025-30796
6.1
Medium
Le Ngoc AnhYes
2025-02-11 15:21CVE-2024-13554
5.3
Medium
incognitoYes
2025-01-17 19:59CVE-2024-13184
7.5
High
stealthcopterYes
2025-01-07 00:00CVE-2024-11916
7.4
High
Lucio SáYes
2025-01-07 00:00CVE-2024-11816
8.8
High
stealthcopterYes
2024-10-16 00:00CVE-2024-9347
6.1
Medium
vgo0Yes
2024-09-30 00:00CVE-2024-47386
6.1
Medium
Le Ngoc AnhYes
2024-09-03 00:00CVE-2024-8121
5.4
Medium
Marco WotschkaYes
Showing 1–10 of 17 reports
WP Extended &#8211; The Ultimate WordPress Toolkit banner
Latestv3.2.7

WP Extended &#8211; The Ultimate WordPress Toolkit

WP Extended

Author

WP Extended

4.9(28)
98/100
Last Updated
2026-06-22 (1mo ago)
Active Installs
600+
Downloads
38,096
Requires WP
5.6+
Requires PHP
7.4+
Tested up to
WP 6.9.5
Created
2022-09-26 (4y ago)

WP Extended is a modular all-in-one WordPress plugin that helps you replace multiple single-purpose plugins with one lightweight toolkit. Whether you build client sites, run an agency, manage WooCommerce stores, or just want a cleaner WordPress setup, WP Extended gives you practical tools to customise, streamline and secure your site without plugin bloat. Instead of installing separate plugins for duplicate posts, SMTP, code snippets, SVG upload, maintenance mode, custom login URLs, user switching, post ordering, exports, admin cleanup and more, you can manage everything from one modern interface and only enable the modules you actually need. Why WP Extended? Replace plugin bloat with one modular toolkit Enable only the features you need Save time managing content, users and admin workflows Improve day-to-day WordPress usability Add practical security hardening and login protection Keep your site lean with a single, well-organised plugin Suitable for freelancers, agencies, developers and site owners Popular free modules include: Duplicate Posts & Pages SMTP Email Code Snippets SVG File Upload User Switching Export Posts Export Users Post Type Order Post Type Switcher Quick Add Post Custom Login URL Limit Login Attempts Maintenance Mode Hide Admin Bar Disable XML-RPC Hide WordPress Version User Enumeration Protection Redirect 404 to Homepage External Permalinks Open External Links in New Tab Rollback Manager Menu Visibility Pixel Tag Manager User Last Login Disable RSS Feeds Clean Profiles Classic Editor support WP Extended is built for real WordPress workflows WP Extended is not just another “Swiss army knife” plugin with a cluttered settings page. It is designed as a modular toolkit, so each feature feels focused and easy to manage. Recent releases have introduced a rebuilt interface, stronger export tools, better block editor support, new settings controls, and continued improvements across admin customisation, snippets, login tools and content workflows. Use WP Extended to: Duplicate and reorganise content faster Export users and posts in multiple formats Improve admin usability for clients and teams Customise the login experience Add lightweight security enhancements Manage media and SVG uploads more safely Reduce reliance on lots of small plugins Who is WP Extended for? Freelancers building and maintaining client sites Agencies managing multiple WordPress installs Developers who want useful admin and workflow tools Site owners who want more control without unnecessary complexity Pro features expand WP Extended even further with advanced admin customisation, admin columns, quick search, media replace, media trash, disable comments, disable auto updates, debug tools, cleaner dashboards and more. If you want one plugin that helps manage WordPress more efficiently while reducing plugin sprawl, WP Extended is built for exactly that. Documentation: https://wpextended.io/docs/ Changelog: https://wpextended.io/changelog/ Website: https://wpextended.io/

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C