What’s Vulnerable › Products

vanquish WordPress User Extra Fields vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 7 published in the last 12 months.

Check whether your vanquish WordPress User Extra Fields version is affected

Latest vanquish WordPress User Extra Fields vulnerabilities

• CVE-2025-69377 — WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability (CVSS 7.7)
• CVE-2025-69376 — WordPress User Extra Fields plugin <= 17.0 - Arbitrary File Deletion vulnerability (CVSS 8.6)
• CVE-2025-67991 — WordPress User Extra Fields plugin <= 16.8 - Cross Site Scripting (XSS) vulnerability (CVSS 7.1)
• CVE-2025-67579 — WordPress User Extra Fields plugin <= 16.8 - Broken Access Control vulnerability (CVSS 5.3)
• CVE-2025-7846 — WordPress User Extra Fields <= 16.7 - Authenticated (Subscriber+) Arbitrary File Deletion via save_fields Function (CVSS 8.8)
• CVE-2024-11150 — WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion (CVSS 9.8)
• CVE-2024-10800 — WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8)