Oceanwp Ocean Extra vulnerabilities

• oceanwp ocean extra Ocean Extra <= 2.4.6 - Unauthenticated Arbitrary Shortcode Execution CVE-2025-3472 6.5 MediumApril 22, 2025
• oceanwp ocean extra Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'ocean_gallery_id' CVE-2025-3458 6.4 MediumApril 22, 2025
• oceanwp ocean extra Ocean Extra <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2025-3457 6.4 MediumApril 22, 2025
• oceanwp ocean extra WordPress Ocean Extra plugin <= 2.2.9 - Authenticated Cross Site Scripting (XSS) vulnerability CVE-2024-37489 6.5 MediumJuly 21, 2024
• oceanwp ocean extra Ocean Extra <= 2.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3167 6.4 MediumApril 9, 2024
• oceanwp ocean extra Ocean Extra <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-1277 6.4 MediumFebruary 20, 2024
• oceanwp ocean extra WordPress Ocean Extra Plugin <= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF) CVE-2023-49164 5.4 MediumDecember 19, 2023
• oceanwp ocean extra Ocean Extra <=1.6.5 - Cross-Site Request Forgery Bypass CVE-2020-36760 4.3 MediumJuly 12, 2023
• oceanwp ocean extra WordPress Ocean Extra Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS) CVE-2023-23891 5.5 MediumApril 6, 2023
• oceanwp ocean extra WordPress Ocean Extra Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS) CVE-2023-24399 5.5 MediumMarch 30, 2023
• oceanwp ocean extra Ocean Extra < 2.1.3 - Subscriber+ Arbitrary Post Content Disclosure CVE-2023-0749 6.5 MediumMarch 13, 2023
• oceanwp ocean extra Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection CVE-2022-3374 7.2 HighOctober 31, 2022
• oceanwp ocean extra Ocean Extra < 1.9.5 - Reflected Cross-Site Scripting CVE-2021-25104 6.1 MediumJune 20, 2022
• oceanwp ocean extra includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows... CVE-2019-16250 7.5 HighSeptember 11, 2019