Security
فارسی
All products

ocean-extra

WordPress · Plugin
20 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterCVE-2024-13362 add-expires-headersadd-fields-to-checkout-page-woocommerce WordPress Medium Fix reported
Ocean Extra <= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via 'oceanwp_library' Shortcode TemplateCVE-2026-86803 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.5.3 - Missing AuthorizationCVE-2026-34903 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library ShortcodeCVE-2025-9499 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2025-49068 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ocean_gallery_id'CVE-2025-3458 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode ExecutionCVE-2025-3472 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2025-3457 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.2.9 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-37489 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr WidgetCVE-2024-5531 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-3167 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-1277 ocean-extra WordPress Medium Fix reported
Ocean Extra <=1.6.5 - Cross-Site Request Forgery BypassCVE-2020-36760 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.2.2 - Cross-Site Request Forgery to Arbitrary Plugin ActivationCVE-2023-49164 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 1.5.7 - Unauthenticated Options update and CSS injectionCVE-2019-16250 ocean-extra WordPress High Fix reported
Ocean Extra <= 2.0.4 - Authenticated (Administrator+) PHP Object InjectionCVE-2022-3374 ocean-extra WordPress High Fix reported
Ocean Extra <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via ShortcodeCVE-2023-23891 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.1.2 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2023-24399 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 1.9.4 - Reflected Cross-Site ScriptingCVE-2021-25104 ocean-extra WordPress Medium Fix reported
Ocean Extra <= 2.1.2 - Authenticated (Subscriber+) Arbitrary Post AccessCVE-2023-0749 ocean-extra WordPress Medium Fix reported