Unauthorized Data Modification in Solace Extra Plugin for WordPress

CVE-2026-18316

What is CVE-2026-18316?

The Solace Extra plugin for WordPress is marked by a significant security flaw that enables unauthorized modification of critical data. This occurs due to a missing capability check in the import_zip() function, present in all versions up to and including 1.6.0. The function is hooked into both wp_ajax_action-import-zip and wp_ajax_nopriv_action-import-zip, which means it only relies on an ajax-nonce for validation. Since this nonce is accessible to any authenticated user, including those with Subscriber-level access, attackers can exploit this vulnerability to erase navigation menus, sidebar widgets, and even Elementor templates. Furthermore, they can invoke arbitrary content imports, potentially leading to a serious compromise of the site's integrity and user experience.

References