Lucene search
+L

20 matches found

EUVD
EUVD
•added 2026/04/07 9:31 a.m.•24 views

EUVD-2026-19594

Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: from n/a through 2.5.3...

5.4CVSS5.9AI score0.00287EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/07 9:16 a.m.•15 views

CVE-2026-34903

Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: from n/a through 2.5.3...

5.4CVSS0.00287EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/07 12:00 a.m.•1 views

CVE-2026-34903: Missing Authorization

Missing Authorization vulnerability in OceanWP Ocean Extra allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ocean Extra: from n/a through 2.5.3...

5.4CVSS5.9AI score0.00287EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•31 views

EUVD-2025-17135

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00204EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/06/08 11:58 a.m.•19 views

CVE-2025-49068

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oceanwp Ocean Extra ocean-extra allows Stored XSS.This issue affects Ocean Extra: from n/a through = 2.4.8...

6.5CVSS5.9AI score0.00204EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/06 12:15 p.m.•24 views

CVE-2025-49068

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oceanwp Ocean Extra ocean-extra allows Stored XSS.This issue affects Ocean Extra: from n/a through = 2.4.8...

6.5CVSS0.00204EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/06/06 12:00 a.m.•4 views

CVE-2025-49068: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in oceanwp Ocean Extra ocean-extra allows Stored XSS.This issue affects Ocean Extra: from n/a through = 2.4.8...

6.5CVSS5.8AI score0.00204EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2025/05/23 2:38 a.m.•15 views

CVE-2023-23891

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in OceanWP Ocean Extra plugin = 2.1.1 versions. Needs the OceanWP theme installed and activated...

5.5CVSS5.2AI score0.00343EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/21 8:15 a.m.•37 views

CVE-2024-37489

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OceanWP Ocean Extra allows Stored XSS.This issue affects Ocean Extra: from n/a through 2.2.9...

6.5CVSS0.00314EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/21 12:00 a.m.•3 views

CVE-2024-37489: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in OceanWP Ocean Extra allows Stored XSS.This issue affects Ocean Extra: from n/a through 2.2.9...

6.5CVSS5.8AI score0.00314EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/19 10:15 p.m.•36 views

CVE-2023-49164

Cross-Site Request Forgery CSRF vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through 2.2.2...

8.8CVSS0.00286EPSS
SaveExploits0References1
OSV
OSV
•added 2023/12/19 10:15 p.m.•20 views

CVE-2023-49164

Cross-Site Request Forgery CSRF vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through 2.2.2...

8.8CVSS7.3AI score0.00286EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/19 10:15 p.m.•26 views

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through 2.2.2...

6.8CVSS7.2AI score0.00286EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/19 9:41 p.m.•70 views

CVE-2023-49164

The CVE describes a Cross-Site Request Forgery (CSRF) in the WordPress OceanWP Ocean Extra plugin affecting versions through 2.2.2. The vulnerability enables an attacker to induce a user to trigger unintended actions on the web application, including potential arbitrary plugin activation. Impact ...

8.8CVSS8.5AI score0.00286EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/19 12:00 a.m.•0 views

CVE-2023-49164: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in OceanWP Ocean Extra.This issue affects Ocean Extra: from n/a through 2.2.2...

8.8CVSS7.8AI score0.00286EPSS
SaveExploits0References3
NVD
NVD
•added 2023/04/06 2:15 p.m.•35 views

CVE-2023-23891

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in OceanWP Ocean Extra plugin = 2.1.1 versions. Needs the OceanWP theme installed and activated...

5.5CVSS5.2AI score0.00343EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/06 12:00 a.m.•2 views

CVE-2023-23891: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in OceanWP Ocean Extra plugin = 2.1.1 versions. Needs the OceanWP theme installed and activated...

5.5CVSS7.8AI score0.00343EPSS
SaveExploits1References2
NVD
NVD
•added 2023/03/30 12:15 p.m.•31 views

CVE-2023-24399

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in OceanWP Ocean Extra plugin = 2.1.2 versions...

5.5CVSS5.2AI score0.00344EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2023/03/30 12:00 a.m.•16 views

PT-2023-19560 · Oceanwp · Oceanwp Ocean Extra

Name of the Vulnerable Software and Affected Versions: OceanWP Ocean Extra plugin versions = 2.1.2 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability. It affects users with contributor or higher authentication levels. There is no information provided about the...

5.5CVSS5.8AI score0.00344EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/03/30 12:00 a.m.•2 views

CVE-2023-24399: Improper Neutralization of Input During Web Page Generation

Auth. contributor+ Stored Cross-Site Scripting XSS vulnerability in OceanWP Ocean Extra plugin = 2.1.2 versions...

5.5CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Rows per page
Query Builder