User Extra Fields

Vulnerabilities 8Slug wp-user-extra-fieldsLatest version 1.0Plugin page →

Minimum safe version

17.1

Update to 17.1 or later to address 7 fixable vulnerabilities

Latest available1.0 ✗⚠ 1 vulnerability has no fix
High 7.7 Unfixed
2026-02-20≤ 17.0

CVE-2025-69377

CVEWordfence
Medium 5.3
2025-12-15< 16.9

User Extra Fields <= 16.8 - Missing Authorization

WordfenceCVE
High 8.8
2025-10-31< 16.8

WordPress User Extra Fields Plugin <= 16.7 is vulnerable to Arbitrary File Deletion

PatchstackWordfenceCVE