CVE-2025-9499

CVE-2025-9499 refers to a Stored Cross‑Site Scripting vulnerability in the WordPress Ocean Extra plugin (versions up to and including 2.4.9). The issue stems from insufficient input sanitization and output escaping in the oceanwp_library shortcode, enabling an authenticated attacker with contribu...

WordPress Ocean Extra plugin <= 2.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via oceanwp_library Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via oceanwplibrary Shortcode vulnerability discovered by Muhammad Yudha - DJ in WordPress Plugin Ocean Extra versions = 2.4.9...

WordPress plugin Ocean Extra 跨站脚本漏洞

WordPress Ocean Extra plugin is a free plugin for the WordPress platform, designed for the OceanWP theme, aiming to enhance the website building experience by adding extra functionality and flexibility. A cross-site scripting vulnerability exists in the WordPress Ocean Extra plugin, which stems...

CVE-2025-8891

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1. This is due to missing or incorrect nonce validation on the oceanwpnoticebuttonclick function. This makes it possible for unauthenticated attackers to install the Ocean Extra plugin via a forge...

Malicious code in ocean-a74nn-9pmbx-haven-project (npm)

The package ocean-a74nn-9pmbx-haven-project was found to contain malicious code...

Malicious code in ocean-nectar-qxl127-project (npm)

The package ocean-nectar-qxl127-project was found to contain malicious code...

Malicious code in kale-ocean-qah232-project (npm)

The package kale-ocean-qah232-project was found to contain malicious code...

Malicious code in jetty-ocean-vznq (npm)

The package jetty-ocean-vznq was found to contain malicious code...

Malicious code in waterfall-ocean-mpt094-project (npm)

The package waterfall-ocean-mpt094-project was found to contain malicious code...

Malicious code in molecule_h2ypp_dea3s_ocean (npm)

The package moleculeh2yppdea3socean was found to contain malicious code...

Malicious code in yew-mbd6w-d8jgw-ocean-project (npm)

The package yew-mbd6w-d8jgw-ocean-project was found to contain malicious code...

Malicious code in orbit-ocean-zs01 (npm)

The package orbit-ocean-zs01 was found to contain malicious code...

Malicious code in thunder-b131w-hp6vs-ocean-project (npm)

The package thunder-b131w-hp6vs-ocean-project was found to contain malicious code...

Malicious code in jacket-ocean-wds111-project (npm)

The package jacket-ocean-wds111-project was found to contain malicious code...

Malicious code in ocean-mist-est430-project (npm)

The package ocean-mist-est430-project was found to contain malicious code...

Malicious code in nugget-ocean-qoz163-project (npm)

The package nugget-ocean-qoz163-project was found to contain malicious code...

Malicious code in ocean-vz9k7-bf2ia-uplift-project (npm)

The package ocean-vz9k7-bf2ia-uplift-project was found to contain malicious code...

Malicious code in terra-1wn2p-5kw79-ocean-project (npm)

The package terra-1wn2p-5kw79-ocean-project was found to contain malicious code...

Malicious code in airplane-ocean-a3dr (npm)

The package airplane-ocean-a3dr was found to contain malicious code...

Malicious code in ocean-reef-fvx726-project (npm)

The package ocean-reef-fvx726-project was found to contain malicious code...