WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
orion-sms-otp-verification
Published
2025-10-14
Title
Orion SMS OTP Verification <= 1.1.7 - Authentication Bypass via Account Takeover
Slug
os-bxslider
Published
2024-11-08
Title
OS BXSlider <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
os-diagnosis-generator
Published
2025-06-05
Title
診断ジェネレータ作成プラグイン <= 1.4.16 - Missing Authorization
Slug
os-our-team
Published
2024-11-08
Title
OS Our Team <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
os-pricing-tables
Published
2024-11-08
Title
OS Pricing Tables <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
osd-subscribe
Published
2021-09-09
Title
OSD Subscribe <= 1.2.3 - Reflected Cross-Site Scripting
Slug
ose-firewall
Published
2014-08-01
Title
Centrora Security 3.2.1 - Multiple Admin Actions CSRF
Slug
oshine-core
Published
2025-09-22
Title
Oshine Core <= 1.5.5 - Missing Authorization
Slug
oshine-modules
Published
2025-01-27
Title
Oshine Modules < 3.3.8 - Unauthenticated Server-Side Request Forgery
Slug
oshine-modules
Published
2025-01-27
Title
Oshine Modules < 3.3.8 - Reflected Cross-Site Scripting
Slug
osm
Published
2022-09-30
Title
OSM < 6.0.3 - CSRF
Slug
osm
Published
2023-05-03
Title
OSM – OpenStreetMap < 6.0.6 - Contributor+ Stored XSS via Shortcode
Slug
osm
Published
2024-07-08
Title
OSM – OpenStreetMap < 6.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
osm
Published
2024-07-08
Title
OSM – OpenStreetMap < 6.0.4 - Contributor+ SQL Injection
Slug
osm
Published
2024-09-26
Title
OSM < 6.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via osm_map and osm_map_v3 Shortcodes
Slug
osm
Published
2024-11-08
Title
OSM – OpenStreetMap < 6.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
osm
Published
2025-03-31
Title
OSM – OpenStreetMap <= 6.1.9 - Contributor+ Stored XSS
Slug
osm-map-elementor
Published
2024-06-18
Title
OSM Map Widget for Elementor < 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter
Slug
osm-map-elementor
Published
2025-08-28
Title
OSM Map Widget for Elementor < 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Button URL
Slug
osmapper
Published
2022-03-01
Title
OSMapper <= 2.1.5 - Unauthenticated Arbitrary Post Deletion
Slug
osomblocks
Published
2025-06-26
Title
Osom Blocks < 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via class_name Parameter
Slug
oss-aliyun
Published
2024-03-28
Title
OSS Aliyun < 1.4.11 - Authenticated (Administrator+) SQL Injection
Slug
oss-upload
Published
2025-03-24
Title
OSS Upload <= 4.8.9 - Cross-Site Request Forgery
Slug
osticket-wp-bridge
Published
2025-09-19
Title
osTicket WP Bridge <= 1.9.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Slug
ot-twitter-feed
Published
2025-11-10
Title
Twitter Feed <= 1.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting