WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
ocean-extra
Published
2023-02-14
Title
Ocean Extra < 2.1.3 - Contributor+ Stored XSS
Slug
ocean-extra
Published
2023-02-14
Title
Ocean Extra < 2.1.3 - Subscriber+ Arbitrary Post Content Disclosure
Slug
ocean-extra
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
ocean-extra
Published
2023-11-28
Title
Ocean Extra < 2.2.3 - Cross-Site Request Forgery to Arbitrary Plugin Activation
Slug
ocean-extra
Published
2024-02-16
Title
Ocean Extra < 2.2.5 - Contributor+ Stored XSS
Slug
ocean-extra
Published
2024-04-08
Title
Ocean Extra < 2.2.7 - Contributor+ Stored Cross-Site Scripting
Slug
ocean-extra
Published
2024-06-10
Title
Ocean Extra < 2.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr Widget
Slug
ocean-extra
Published
2024-07-04
Title
Ocean Extra < 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ocean-extra
Published
2025-04-21
Title
Ocean Extra < 2.4.7 - Contributor+ Stored XSS via Shortcode
Slug
ocean-extra
Published
2025-04-21
Title
Ocean Extra < 2.4.7 - Contributor+ Stored XSS via 'ocean_gallery_id'
Slug
ocean-extra
Published
2025-04-21
Title
Ocean Extra < 2.4.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
ocean-extra
Published
2025-06-02
Title
Ocean Extra < 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
ocean-extra
Published
2025-08-29
Title
Ocean Extra < 2.5.0 - Contributor+ Stored XSS
Slug
ocean-modal-window
Published
2025-11-28
Title
Ocean Modal Window < 2.3.3 - Editor+ Remote Code Execution via Modal Conditions
Slug
ocean-social-sharing
Published
2025-08-01
Title
Ocean Social Sharing < 2.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
oceanpayment-creditcard-gateway
Published
2025-10-14
Title
Oceanpayment CreditCard Gateway <= 6.0 - Unauthenticated Order Status Update
Slug
ocim-mp3
Published
2016-03-07
Title
Ocim MP3 Plugin - Unauthenticated Reflected Cross-Site Scripting (XSS)
Slug
octrace-support
Published
2022-02-28
Title
Unauthorised AJAX Calls via Freemius
Slug
octrace-support
Published
2023-07-18
Title
Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting
Slug
octrace-support
Published
2024-12-11
Title
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Reflected Cross-Site Scripting
Slug
octrace-support
Published
2025-01-14
Title
WordPress HelpDesk & Support Ticket System Plugin – Octrace Support <= 1.2.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
Slug
od-photogallery-plugin
Published
2024-12-17
Title
odPhotogallery <= 0.5.3 - Reflected Cross-Site Scripting
Slug
odihost-easy-redirect-301
Published
2025-03-24
Title
Easy 301 Redirects <= 1.33 - Cross-Site Request Forgery
Slug
odihost-newsletter-plugin
Published
2014-08-01
Title
OdiHost Newsletter <= 1.0 - SQL Injection
Slug
oembed-gist
Published
2024-01-03
Title
oEmbed Gist <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting