CVE-2026-16965

The Solace Extra WordPress plugin prior to 1.6.1 is affected. An AJAX action lacks capability/nonce checks, enabling any authenticated user (e.g., subscriber) and, via CSRF, any logged-in user to update post meta on arbitrary posts and to deactivate the site’s active templates. No exploit details...