Advisories · Technology
OceanWP.
Every CVE that names OceanWP among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerability
- OceanWP
- Cross-site scripting (XSS)
- CVSS 4.3 Medium
OceanWP < 4.1.2 - Subscriber+ Limited Option Update
- OceanWP
- CVSS 4.3 Medium
OceanWP <= 4.0.9 - 4.1.1 - Cross-Site Request Forgery to Ocean Extra Plugin Installation
- OceanWP
- Cross-site request forgery (CSRF)
- CVSS 6.4 Medium
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
- BlossomThemes Social Feed
- sayful Carousel Slider
- Cross-site scripting (XSS)
- CVSS 4.9 Medium
OceanWP <= 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Select HTML Tag
- OceanWP
- Cross-site scripting (XSS)
- CVSS 7.6 High
WordPress OceanWP theme <= 3.4.1 - Authenticated Local File Inclusion vulnerability
- OceanWP
- Path traversal
- CVSS 4.3 Medium
OceanWP <= 3.5.4 - Missing Authorization to Sensitive Information Exposure via Limited Local File Inclusion
- OceanWP
- Broken access control