A vulnerability identified as critical has been detected in Solace Extra Plugin up to 1.6.0 on WordPress. The affected element is an unknown function. This manipulation causes improper access controls.

This vulnerability is handled as CVE-2026-16948. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.