WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ova-events-manager
Published
2025-06-11
Title
Ovatheme Events Manager < 1.8.5 - Unauthenticated Arbitrary File Upload
Slug
ova-events-manager
Published
2025-10-10
Title
Ovatheme Events Manager < 1.8.6 - Unauthenticated Arbitrary File Upload
Slug
ova-events-manager
Published
2025-11-07
Title
Ovatheme Events Manager < 1.8.7 - Missing Authorization
Slug
ovation-elements
Published
2025-05-07
Title
Ovation Elements < 1.1.3 - Missing Authorization
Slug
overlay-image-divi-module
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
overlay-image-divi-module
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
overstock-affiliate-links
Published
2025-12-19
Title
Overstock Affiliate Links <= 1.1 - Reflected Cross-Site Scripting via $_SERVER['PHP_SELF']
Slug
ovic-addon-toolkit
Published
2024-04-12
Title
Ovic Addon Toolkit <= 2.6.1 - Missing Authorization
Slug
ovic-import-demo
Published
2024-06-06
Title
Ovic Importer <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Download
Slug
ovic-product-bundle
Published
2023-09-01
Title
Ovic Product Bundle <= 1.1.2 - Missing Authorization
Slug
ovic-vc-addon
Published
2023-11-07
Title
Ovic Responsive WPBakery < 1.2.9 - Subscriber+ Option Update
Slug
ovic-vc-addon
Published
2024-04-16
Title
Ovic Responsive WPBakery <= 1.3.0 - Missing Authorization
Slug
owl-carousel
Published
2023-05-11
Title
Owl Carousel <= 0.5.3 - Contributor+ Stored Cross-Site Scripting via shortcode
Slug
owl-carousel-wp
Published
2026-01-01
Title
Owl Carousel WP <= 2.2.2 - Authenticated (Editor+) Stored Cross-Site Scripting
Slug
owm-weather
Published
2022-11-02
Title
OWM Weather < 5.6.9 - Contributor+ SQLi
Slug
owm-weather
Published
2023-02-07
Title
OWM Weather < 5.6.12 - Post Duplication via CSRF
Slug
ownerrez
Published
2025-04-01
Title
OwnerRez < 1.2.1 - Cross-Site Request Forgery
Slug
ownerrez
Published
2025-07-04
Title
OwnerRez < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ownid-passwordless-login
Published
2025-10-14
Title
OwnID Passwordless Login <= 1.3.4 - Authentication Bypass
Slug
oxyextras
Published
2024-03-16
Title
OxyExtras < 1.4.5 - Unauthenticated Cross-Site Scripting
Slug
oxygen
Published
2023-07-20
Title
Oxygen Builder < 4.4 - CSRF
Slug
oxygen-mydata
Published
2025-04-09
Title
Oxygen MyData for WooCommerce < 1.0.65 - Unauthenticated Arbitrary File Deletion
Slug
oxygenbuilder
Published
2024-01-05
Title
Oxygen Builder < 4.8.1 - Contributor+ Stored XSS
Slug
oxygenbuilder
Published
2024-05-22
Title
Oxygen Builder < 4.8.3 - Authenticated (Contributor+) Remote Code Execution
Slug
oxygenbuilder
Published
2024-08-26
Title
Oxygen Builder < 4.9 - Missing Authorization to Authenticated (Subscriber+) Stylesheet Update