2 matches found
CVE-2015-9320
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
CVE-2016-10895
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.