Plugin icon

oik

oik

Vulnerabilities:

8

Last Updated:

September 5, 2026

Active Installs:

2000

Published
Title
Fixed in
CVSS
Published
2026-09-29
Title
oik < 4.16.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.16.0
CVSS
6.4 (medium)
Published
2025-11-26
Title
oik < 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.15.4
CVSS
6.4 (medium)
Published
2025-08-14
Title
oik < 4.15.3 - Reflected Cross-Site Scripting
Fixed in
Fixed in 4.15.3
CVSS
6.1 (medium)
Published
2025-07-30
Title
oik < 4.15.3 - Cross-Site Request Forgery
Fixed in
Fixed in 4.15.3
CVSS
4.3 (medium)
Published
2025-06-05
Title
oik < 4.15.2 - Missing Authorization
Fixed in
Fixed in 4.15.2
CVSS
4.3 (medium)
Published
2024-08-16
Title
oik < 4.12.1 - Cross-Site Request Forgery
Fixed in
Fixed in 4.12.1
CVSS
4.3 (medium)
Published
2024-07-08
Title
oik < 4.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via bw_button Shortcode
Fixed in
Fixed in 4.12.0
CVSS
6.4 (medium)
Published
2024-03-14
Title
oik < 4.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Fixed in
Fixed in 4.10.2
CVSS
6.4 (medium)