WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
old-post-spinner
Published
2014-08-01
Title
OPS Old Post Spinner 2.2.1 - LFI
Slug
old-posts-highlighter
Published
2026-05-26
Title
Old Posts Highlighter <= 1.0.3 - Cross-Site Request Forgery to Settings Update
Slug
oleggo-livestream
Published
2014-05-28
Title
Oleggo Livestream <= 0.2.6 - XSS
Slug
olevmedia-shortcodes
Published
2015-08-25
Title
Olevmedia Shortcodes <= 1.1.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
olevmedia-shortcodes
Published
2023-02-02
Title
Olevmedia Shortcodes <= 1.1.9 - Contributor+ Stored XSS
Slug
olimometer
Published
2016-11-22
Title
Olimometer <= 2.56 - Unauthenticated SQL Injection
Slug
olive-one-click-demo-import
Published
2023-08-28
Title
Olive One Click Demo Import <= 1.1.2 - Admin+ Arbitrary File Upload
Slug
olive-one-click-demo-import
Published
2024-03-20
Title
Olive One Click Demo Import < 1.1.2 - Missing Authorization
Slug
olive-one-click-demo-import
Published
2024-07-11
Title
Olive One Click Demo Import <= 1.1.2 - Unauthenticated Information Exposure
Slug
oliver-pos
Published
2024-02-19
Title
Oliver POS < 2.4.2.1 - Subscriber+ Unauthorized AJAX Calls
Slug
oliver-pos
Published
2024-02-27
Title
Oliver POS – A WooCommerce Point of Sale (POS) < 2.4.1.9 - Cross-Site Request Forgery
Slug
oliver-pos
Published
2025-02-14
Title
Oliver POS – A WooCommerce Point of Sale (POS) < 2.4.2.4 - Sensitive Information Exposure to Privilege Escalation
Slug
oliver-pos
Published
2026-05-19
Title
Oliver POS < 4.5.4 - Unauthenticated Authorization Bypass Through User-Controlled Key to 'OliverAuth' Header
Slug
olivewp-companion
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
olympus-google-fonts
Published
2021-08-23
Title
Fonts Plugin < 3.0.3 - Contributor+ Stored Cross-Site Scripting
Slug
olympus-google-fonts
Published
2024-08-16
Title
Fonts < 3.7.8 - Missing Authorization
Slug
olympus-google-fonts
Published
2024-08-16
Title
Fonts < 3.7.8 - Cross-Site Request Forgery
Slug
olympus-shortcodes
Published
2024-11-08
Title
Olympus Shortcodes <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
om-stripe
Published
2025-02-04
Title
OM Stripe <= 02.00.00 - Reflected XSS
Slug
omigo
Published
2026-02-06
Title
OMIGO <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
omni-secure-files
Published
2012-06-07
Title
Omni Secure Files 0.1.13 - Unauthenticated Arbitrary File Upload
Slug
omnify-widget
Published
2025-03-24
Title
Omnify <= 2.0.3 - Reflected Cross-Site Scripting
Slug
omnileads-scripts-and-tags-manager
Published
2025-03-28
Title
OmniLeads Scripts and Tags Manager <= 1.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
omnipress
Published
2024-10-15
Title
Omnipress < 1.5.0 - Contributor+ Stored XSS
Slug
omnipress
Published
2025-03-13
Title
Omnipress < 1.5.5 - Authenticated (Contributor+) Post Disclosure