CVE-2022-46841

CVE-2022-46841 is a Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder for WordPress, affecting versions

CVE-2023-6938

CVE-2023-6938 affects the Oxygen Builder WordPress plugin. All versions up to and including 4.8 are vulnerable to a Stored Cross‑Site Scripting (XSS) via a custom field due to insufficient input sanitization and output escaping. Exploitation requires contributor‑level access or higher by an authe...