Advisories · Technology

Omnipress.

Every CVE that names Omnipress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-25432 CVE record

CVSS 6.5 Medium

WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability
- Omnipress
- Cross-site scripting (XSS)
Not analysed yet 19 Feb 2026
CVE-2026-24538 CVE record

CVSS 7.5 High

WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability
- Omnipress
- File inclusion
Not analysed yet 23 Jan 2026
CVE-2025-12163 CVE record

CVSS 6.4 Medium

Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting
- Omnipress
- Cross-site scripting (XSS)
Not analysed yet 5 Dec 2025
CVE-2025-53276 CVE record

CVSS 6.5 Medium

WordPress Omnipress plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability
- Omnipress
- Cross-site scripting (XSS)
Not analysed yet 27 Jun 2025
CVE-2024-13407 CVE record

CVSS 4.3 Medium

Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure
- Omnipress
- Broken access control
Not analysed yet 14 Mar 2025
CVE-2024-49278 CVE record

CVSS 6.5 Medium

WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability
- Omnipress
- Cross-site scripting (XSS)
Not analysed yet 17 Oct 2024