6.1CVSS
6AI Score
0.001EPSS
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
6.1CVSS
6AI Score
0.001EPSS
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.
9.8CVSS
9.6AI Score
0.002EPSS
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.
9.8CVSS
9.7AI Score
0.002EPSS
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
9.8CVSS
9.7AI Score
0.002EPSS