WordPress Plugin Vulnerabilities

Ocean Extra <= 1.5.8 - Unauthenticated Settings change and CSS injection

Description

The Ocean Extra WordPress plugin was affected by an Unauthenticated Settings change and CSS injection security vulnerability.

Affects Plugins

Plugin icon
ocean-extra
Fixed in 1.5.9

References

CVE
CVE-2019-16250
URL
https://blog.nintechnet.com/settings-change-and-css-injection-in-wordpress-ocean-extra-plugin/

Miscellaneous

Original Researcher
Jerome Bruandet
Verified
No
WPVDB ID
12be12a8-55f2-45c1-b432-0159ae260320

Timeline

Publicly Published
2019-07-04 (about 6 years ago)
Added
2019-07-04 (about 6 years ago)
Last Updated
2020-09-22 (about 5 years ago)

Other

Published
Title
Published
2014-10-17
Title
XCloner - Backup and Restore < 3.1.2 - Multiple Vulnerabilities (RCE & LFI)
Published
2015-02-09
Title
CrossSlide jQuery Plugin <= 2.0.5 - Stored XSS & CSRF
Published
2015-01-02
Title
WP Limit Posts Automatically <= 0.7 - CSRF & XSS
Published
2017-02-23
Title
Democracy Poll < 5.4 - CSRF & XSS
Published
2019-07-11
Title
School Management < 57.0 - CSRF and Stored XSS