WordPress Plugin Vulnerabilities

Slug
Published
Title
Slug
onoffice-for-wp-websites
Published
2025-10-14
Title
onOffice for WP-Websites < 6.10 - Authenticated (Editor+) SQL Injection
Slug
onpay-io-for-woocommerce
Published
2025-11-29
Title
OnPay.io for WooCommerce < 1.0.48 - Missing Authorization
Slug
onwebchat
Published
2020-10-14
Title
Live Chat - Live support < 3.2.0 - Cross-Site Request Forgery
Slug
ooohboi-steroids-for-elementor
Published
2023-02-28
Title
OoohBoi Steroids for Elementor < 2.1.5 - Subscriber+ Attachment Deletion
Slug
ooohboi-steroids-for-elementor
Published
2023-04-18
Title
OoohBoi Steroids for Elementor < 2.1.5 - Arbitrary File Upload
Slug
ooohboi-steroids-for-elementor
Published
2026-03-04
Title
OoohBoi Steroids for Elementor < 2.1.25 - Authenticated (Contributor+) Stored Cross-Site Scripting via Multiple URL Controls
Slug
ooorl
Published
2014-04-25
Title
Ooorl <= 1.0.0 - XSS
Slug
oopspam-anti-spam
Published
2023-01-17
Title
OOPSpam Anti-Spam < 1.1.36 - Admin+ Stored XSS
Slug
oopspam-anti-spam
Published
2023-06-23
Title
OOPSpam Anti-Spam < 1.1.45 - Cross-Site Request Forgery
Slug
oopspam-anti-spam
Published
2025-10-30
Title
OOPSpam Anti-Spam < 1.2.54 - Unauthenticated IP Header Spoofing
Slug
oopspam-anti-spam
Published
2026-03-23
Title
OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) < 1.2.63 - Unauthenticated Stored Cross-Site Scripting
Slug
ootb-openstreetmap
Published
2024-12-12
Title
Out of the Block: OpenStreetMap < 2.8.4 - Contributor+ Stored XSS via ootb_query Shortcode
Slug
opal-estate
Published
2021-08-16
Title
Multiple Plugins - CSRF Bypass
Slug
opal-estate
Published
2021-08-16
Title
Opal Estate <= 1.6.11 - Cross-Site Request Forgery
Slug
opal-estate
Published
2021-08-16
Title
Opal Estate <= 1.6.11 - Missing Authorization
Slug
opal-estate-pro
Published
2024-05-21
Title
Opal Estate Pro <= 1.7.6 - Contributor+ Stored XSS
Slug
opal-estate-pro
Published
2025-06-30
Title
Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'
Slug
opal-hotel-room-booking
Published
2022-05-17
Title
Opal Hotel Room Booking <= 1.2.7 - Contributor+ Stored Cross-Site Scripting
Slug
opal-membership
Published
2024-08-09
Title
Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure
Slug
opal-membership
Published
2024-08-09
Title
Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting
Slug
opal-portfolios
Published
2025-04-01
Title
Opal Portfolio <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
opal-service
Published
2025-09-30
Title
Opal Service <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
opal-widgets-for-elementor
Published
2024-04-25
Title
Opal Widgets For Elementor <= 1.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Slug
opal-woo-custom-product-variation
Published
2024-11-18
Title
Opal Woo Custom Product Variation < 1.1.4 - Unauthenticated Arbitrary File Deletion
Slug
opal-woo-custom-product-variation
Published
2025-05-12
Title
Opal Woo Custom Product Variation < 1.2.1 - Unauthenticated Arbitrary File Deletion