WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
opal-widgets-for-elementor
Published
2024-04-25
Title
Opal Widgets For Elementor <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
opal-woo-custom-product-variation
Published
2024-11-18
Title
Opal Woo Custom Product Variation < 1.1.4 - Unauthenticated Arbitrary File Deletion
Slug
opal-woo-custom-product-variation
Published
2025-05-12
Title
Opal Woo Custom Product Variation < 1.2.1 - Unauthenticated Arbitrary File Deletion
Slug
opcache
Published
2023-10-18
Title
OPcache Dashboard <= 0.3.1 - Reflected XSS
Slug
open-ai-search-bar
Published
2025-04-01
Title
AI Search Bar <= 2.1 - Unauthenticated Stored Cross-Site Scripting
Slug
open-external-links-in-a-new-window
Published
2022-05-09
Title
External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site Scripting
Slug
open-external-links-in-a-new-window
Published
2022-05-09
Title
External Links in New Window / New Tab < 1.43 - Tabnabbing
Slug
open-flash-chart-core-wordpress-plugin
Published
2014-08-01
Title
open-flash-chart-core - ofc_upload_image.php Arbitrary File Upload
Slug
open-graph-metabox
Published
2023-10-18
Title
Open Graph Metabox <= 1.4.4 - CSRF
Slug
open-graphite
Published
2023-03-21
Title
Open Graphite < 1.6.1 - Reflected Cross-Site Scripting
Slug
open-hours
Published
2025-02-17
Title
Open Hours – Easy Opening Hours <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
open-menu
Published
2025-03-31
Title
OpenMenu <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
open-rdw-kenteken-voertuiginformatie
Published
2023-03-17
Title
Open RDW kenteken voertuiginformatie < 2.1.0 - Reflected XSS
Slug
open-social
Published
2023-02-15
Title
WP Open Social <= 5.0 - Admin+ Stored XSS
Slug
open-user-map
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
open-user-map
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
open-user-map
Published
2023-10-18
Title
Open User Map | Everybody can add locations < 1.3.27 - Admin+ Stored XSS
Slug
open-user-map
Published
2025-09-22
Title
Open User Map < 1.4.15 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
open-user-map
Published
2026-02-16
Title
Open User Map < 1.4.17 - Authenticated (Subscriber+) Arbitrary File Download
Slug
openai-tools-for-wp-wc
Published
2025-04-01
Title
OpenAI Tools for WordPress & WooCommerce <= 2.1.5 - Missing Authorization
Slug
openbook-book-data
Published
2022-05-31
Title
OpenBook Book Data <= 3.5.2 - Arbitrary Settings Update to Stored XSS via CSRF
Slug
opencart-product-display
Published
2024-11-08
Title
OpenCart Product Display <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
opencart-product-in-wp
Published
2025-01-03
Title
Opencart Product in WP <= 1.0.1 - Reflected Cross-Site Scripting
Slug
opengraph
Published
2024-06-04
Title
Open Graph < 1.11.3 - Unauthenticated Sensitive Information Exposure
Slug
openid
Published
2024-03-29
Title
OpenID <= 3.6.1 - Reflected Cross-Site Scripting