İçeriğe atla
Noroxi

oceanwp kayıtları

oceanwp üreticisine ait 18 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%38,9
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 19
  2. 22
  3. 23
  4. 24
  5. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

18 kayıt
  • CVE-2025-3472
    40Planlayın

    Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    oceanwp · ocean extra22 Nis 2025

  • CVE-2023-49164
    35İzleyin

    WordPress Ocean Extra Plugin <= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF)

    YüksekCVSS 8,8İstismar yokEPSS %0

    oceanwp · ocean extra19 Ara 2023

  • CVE-2019-16250
    30İzleyin

    includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a C

    YüksekCVSS 7,5İstismar yokEPSS %1

    oceanwp · ocean extra11 Eyl 2019

  • CVE-2023-23700
    30İzleyin

    WordPress OceanWP theme <= 3.4.1 - Authenticated Local File Inclusion vulnerability

    YüksekCVSS 7,6İstismar yokEPSS %1

    oceanwp · oceanwp17 May 2024

  • CVE-2022-3374
    28İzleyin

    Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection

    YüksekCVSS 7,2İstismar yokEPSS %1

    oceanwp · ocean extra31 Eki 2022

  • CVE-2023-0749
    26İzleyin

    Ocean Extra < 2.1.3 - Subscriber+ Arbitrary Post Content Disclosure

    OrtaCVSS 6,5İstismar yokEPSS %1

    oceanwp · ocean extra13 Mar 2023

  • CVE-2022-35730
    26İzleyin

    WordPress Oceanwp sticky header plugin <= 1.0.8 is vulnerable to Cross Site Request Forgery (CSRF)

    OrtaCVSS 6,5İstismar yokEPSS %0

    oceanwp · sticky header4 Ara 2022

  • CVE-2024-3167
    25İzleyin

    Ocean Extra <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 6,4İstismar yokEPSS %1

    oceanwp · ocean extra9 Nis 2024

  • CVE-2021-25104
    24İzleyin

    Ocean Extra < 1.9.5 - Reflected Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    oceanwp · ocean extra20 Haz 2022

  • CVE-2024-1277
    21İzleyin

    Ocean Extra <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting

    OrtaCVSS 5,4İstismar yokEPSS %0

    oceanwp · ocean extra28 Şub 2024

  • CVE-2023-24399
    21İzleyin

    WordPress Ocean Extra Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    oceanwp · ocean extra30 Mar 2023

  • CVE-2023-23891
    21İzleyin

    WordPress Ocean Extra Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 5,4İstismar yokEPSS %0

    oceanwp · ocean extra6 Nis 2023

  • CVE-2024-37489
    21İzleyin

    WordPress Ocean Extra plugin <= 2.2.9 - Authenticated Cross Site Scripting (XSS) vulnerability

    OrtaCVSS 5,4İstismar yokEPSS %0

    oceanwp · ocean extra21 Tem 2024

  • CVE-2025-3458
    21İzleyin

    Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ocean_gallery_id'

    OrtaCVSS 5,4İstismar yokEPSS %0

    oceanwp · ocean extra22 Nis 2025

  • CVE-2025-3457
    21İzleyin

    Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4İstismar yokEPSS %0

    oceanwp · ocean extra22 Nis 2025

  • CVE-2020-36760
    17İzleyin

    Ocean Extra <=1.6.5 - Cross-Site Request Forgery Bypass

    OrtaCVSS 4,3İstismar yokEPSS %1

    oceanwp · ocean extra12 Tem 2023

  • CVE-2025-8944
    17İzleyin

    OceanWP < 4.1.2 - Subscriber+ Limited Option Update

    OrtaCVSS 4,3İstismar yokEPSS %0

    oceanwp · oceanwp5 Eyl 2025

  • CVE-2025-8891
    17İzleyin

    OceanWP <= 4.0.9 - 4.1.1 - Cross-Site Request Forgery to Ocean Extra Plugin Installation

    OrtaCVSS 4,3İstismar yokEPSS %0

    oceanwp · oceanwp13 Ağu 2025