WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
og-tags
Published
2021-09-28
Title
OG Tags < 2.0.2 - Plugin's Settings Update via CSRF
Slug
oganro-reservation-widget
Published
2025-06-19
Title
XML Travel Portal Widget <= 2.0 - Cross-Site Request Forgery
Slug
oganro-travel-portal-search-widget-for-hotelbeds-apitude-api
Published
2025-06-19
Title
Oganro Travel Portal Search Widget for HotelBeds APITUDE API <= 1.0 - Cross-Site Request Forgery
Slug
ogulo-360-tour
Published
2025-08-22
Title
Ogulo – 360° Tour < 1.0.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via slug Parameter
Slug
ohio-extra
Published
2025-02-24
Title
Ohio Extra <= 3.4.7 - Unauthenticated Arbitrary Shortcode Execution
Slug
ohio-extra
Published
2025-11-04
Title
Ohio Extra < 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
oi-yamaps
Published
2023-01-23
Title
Oi Yandex.Maps <= 3.2.7 - Contributor+ Stored XSS
Slug
oik
Published
2024-03-14
Title
oik < 4.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Slug
oik
Published
2024-07-08
Title
oik < 4.12.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via bw_button Shortcode
Slug
oik
Published
2024-08-16
Title
oik < 4.12.1 - Cross-Site Request Forgery
Slug
oik
Published
2025-06-05
Title
oik < 4.15.2 - Missing Authorization
Slug
oik
Published
2025-07-30
Title
oik < 4.15.3 - Cross-Site Request Forgery
Slug
oik
Published
2025-08-14
Title
oik < 4.15.3 - Reflected Cross-Site Scripting
Slug
oik
Published
2025-11-26
Title
oik < 4.15.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
oik-privacy-policy
Published
2025-08-06
Title
oik-privacy-policy < 1.4.11 - Reflected Cross-Site Scripting
Slug
ok-poster-group
Published
2025-03-27
Title
OK Poster Group <= 1.1 - Reflected Cross-Site Scripting
Slug
okay-toolkit
Published
2026-02-05
Title
Okay Toolkit <= 2.3 - Reflected Cross-Site Scripting
Slug
olalaweb-mailchimp-campaign-manager
Published
2026-02-13
Title
MailChimp Campaigns <= 3.2.4 - Missing Authorization to Authenticated (Subscriber+) MailChimp App Disconnection
Slug
old-post-spinner
Published
2014-08-01
Title
OPS Old Post Spinner 2.2.1 - LFI
Slug
oleggo-livestream
Published
2014-05-28
Title
Oleggo Livestream <= 0.2.6 - XSS
Slug
olevmedia-shortcodes
Published
2015-08-25
Title
Olevmedia Shortcodes <= 1.1.8 - Authenticated Reflected Cross-Site Scripting (XSS)
Slug
olevmedia-shortcodes
Published
2023-02-02
Title
Olevmedia Shortcodes <= 1.1.9 - Contributor+ Stored XSS
Slug
olimometer
Published
2016-11-22
Title
Olimometer <= 2.56 - Unauthenticated SQL Injection
Slug
olive-one-click-demo-import
Published
2023-08-28
Title
Olive One Click Demo Import <= 1.1.2 - Admin+ Arbitrary File Upload
Slug
olive-one-click-demo-import
Published
2024-03-20
Title
Olive One Click Demo Import < 1.1.2 - Missing Authorization