<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: oceanwp-ocean-extra</title><description>Every new CVE for oceanwp-ocean-extra.</description><link>https://agentprime.io/</link><item><title>CVE-2026-86803: Ocean Extra &lt;= 2.6.0 - Unauthenticated Arbitrary Shortcode Execution via &apos;oceanwp_library&apos; Shortcode Template</title><link>https://agentprime.io/advisories/CVE-2026-86803/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-86803/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 15 Oct 2026 05:30:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-34903: WordPress Ocean Extra plugin &lt;= 2.5.3 - Broken Access Control vulnerability</title><link>https://agentprime.io/advisories/CVE-2026-34903/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-34903/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 07 Apr 2026 08:57:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-9499: Ocean Extra &lt;= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode</title><link>https://agentprime.io/advisories/CVE-2025-9499/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-9499/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sat, 30 Aug 2025 04:25:05 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-49068: WordPress Ocean Extra plugin &lt;= 2.4.8 - Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2025-49068/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-49068/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 06 Jun 2025 11:32:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3458: Ocean Extra &lt;= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via &apos;ocean_gallery_id&apos;</title><link>https://agentprime.io/advisories/CVE-2025-3458/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3458/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Apr 2025 11:12:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3472: Ocean Extra &lt;= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution</title><link>https://agentprime.io/advisories/CVE-2025-3472/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3472/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Apr 2025 11:12:21 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-3457: Ocean Extra &lt;= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode</title><link>https://agentprime.io/advisories/CVE-2025-3457/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-3457/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 22 Apr 2025 11:12:20 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-37489: WordPress Ocean Extra plugin &lt;= 2.2.9 - Authenticated Cross Site Scripting (XSS) vulnerability</title><link>https://agentprime.io/advisories/CVE-2024-37489/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-37489/</guid><description>CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Sun, 21 Jul 2024 07:29:27 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-5531: Ocean Extra &lt;= 2.2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Flickr Widget</title><link>https://agentprime.io/advisories/CVE-2024-5531/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-5531/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 11 Jun 2024 08:32:39 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-3167: Ocean Extra &lt;= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-3167/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-3167/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 09 Apr 2024 18:59:11 GMT</pubDate><category>CVE</category></item><item><title>CVE-2024-1277: Ocean Extra &lt;= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting</title><link>https://agentprime.io/advisories/CVE-2024-1277/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2024-1277/</guid><description>CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 20 Feb 2024 18:56:31 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-49164: WordPress Ocean Extra Plugin &lt;= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF)</title><link>https://agentprime.io/advisories/CVE-2023-49164/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-49164/</guid><description>CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Tue, 19 Dec 2023 21:41:51 GMT</pubDate><category>CVE</category></item><item><title>CVE-2020-36760: Ocean Extra &lt;=1.6.5 - Cross-Site Request Forgery Bypass</title><link>https://agentprime.io/advisories/CVE-2020-36760/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2020-36760/</guid><description>CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 12 Jul 2023 07:21:50 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-23891: WordPress Ocean Extra Plugin &lt;= 2.1.1 is vulnerable to Cross Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2023-23891/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-23891/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 06 Apr 2023 13:54:38 GMT</pubDate><category>CVE</category></item><item><title>CVE-2023-24399: WordPress Ocean Extra Plugin &lt;= 2.1.2 is vulnerable to Cross Site Scripting (XSS)</title><link>https://agentprime.io/advisories/CVE-2023-24399/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2023-24399/</guid><description>CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 30 Mar 2023 11:14:55 GMT</pubDate><category>CVE</category></item></channel></rss>