| CVE-2026-86803 |
The The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and…
|
6.5
Moyenne
|
15 oct. 2026 |
| CVE-2026-94684 |
Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions
|
6.5
Moyenne
|
23 sept. 2026 |
| CVE-2024-13362 |
Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in…
|
6.1
Moyenne
|
1 mai 2026 |
| CVE-2026-34903 |
Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control…
|
5.4
Moyenne
|
7 avr. 2026 |
| CVE-2025-9499 |
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's oceanwp_library…
|
6.4
Moyenne
|
30 août 2025 |
| CVE-2025-49068 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in oceanwp Ocean…
|
6.5
Moyenne
|
6 juin 2025 |
| CVE-2025-3458 |
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'ocean_gallery_id’ parameter…
|
6.4
Moyenne
|
22 avr. 2025 |
| CVE-2025-3472 |
The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and…
|
6.5
Moyenne
|
22 avr. 2025 |
| CVE-2025-3457 |
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'oceanwp_icon'…
|
6.4
Moyenne
|
22 avr. 2025 |
| CVE-2022-4974 |
The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request…
|
6.3
Moyenne
|
16 oct. 2024 |
| CVE-2024-37489 |
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in OceanWP…
|
6.5
Moyenne
|
21 juil. 2024 |
| CVE-2024-5531 |
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Flickr widget in all…
|
6.4
Moyenne
|
11 juin 2024 |
| CVE-2024-3167 |
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘twitter_username’ parameter…
|
6.4
Moyenne
|
9 avr. 2024 |
| CVE-2024-1277 |
The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via custom fields in all versions up…
|
6.4
Moyenne
|
20 févr. 2024 |
| CVE-2023-49164 |
Cross-Site Request Forgery (CSRF) vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a…
|
5.4
Moyenne
|
19 déc. 2023 |
| CVE-2020-36760 |
The Ocean Extra plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including,…
|
4.3
Moyenne
|
12 juil. 2023 |