CVE-2026-18316

Name of the Vulnerable Software and Affected Versions Solace Extra versions prior to 1.6.1

Description The Solace Extra plugin for WordPress contains a flaw allowing unauthorized modification and loss of data. The issue stems from a missing capability check in the import zip() function. The handler is registered on the wp ajax action-import-zip and wp ajax nopriv action-import-zip endpoints. It only verifies the ajax-nonce nonce, which is accessible to any authenticated user, including those with Subscriber-level access. This allows attackers to wipe navigation menus, sidebar widgets via update option('sidebars widgets', array()), theme mods via remove theme mods(), and Elementor templates, or trigger arbitrary demo-content imports.

Recommendations Update the plugin to a version later than 1.6.0. As a temporary workaround, restrict access to the import zip() function to prevent unauthorized data modification.