Advisories · Technology

bobbingwide oik.

Every CVE that names bobbingwide oik among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-96819 CVE record

CVSS 7.1 High

WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability
- bobbingwide oik
- Cross-site scripting (XSS)
Not analysed yet 30 Sept 2026
CVE-2025-67549 CVE record

CVSS 6.5 Medium

WordPress oik plugin <= 4.15.3 - Cross Site Scripting (XSS) vulnerability
- bobbingwide oik
- Cross-site scripting (XSS)
Not analysed yet 9 Dec 2025
CVE-2025-54670 CVE record

CVSS 7.1 High

WordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability
- bobbingwide oik
- Cross-site scripting (XSS)
Not analysed yet 20 Aug 2025
CVE-2025-54671 CVE record

CVSS 4.3 Medium

WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability
- bobbingwide oik
- Cross-site request forgery (CSRF)
Not analysed yet 14 Aug 2025
CVE-2025-49241 CVE record

CVSS 5.3 Medium

WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability
- bobbingwide oik
- Broken access control
Not analysed yet 6 Jun 2025
CVE-2024-43356 CVE record

CVSS 4.3 Medium

WordPress oik plugin <= 4.12.0 - Arbitrary File Deletion vulnerability
- bobbingwide oik
- Cross-site request forgery (CSRF)
Not analysed yet 26 Aug 2024
CVE-2024-6391 CVE record

CVSS 6.4 Medium

oik <= 4.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bw_button Shortcode
- bobbingwide oik
- Cross-site scripting (XSS)
Not analysed yet 9 Jul 2024
CVE-2024-2256 CVE record

CVSS 6.4 Medium

oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- bobbingwide oik
- Cross-site scripting (XSS)
Not analysed yet 14 Mar 2024