Wpopal vulnerabilities

Products

• Opal Estate 2
• Opal Estate 2
• Opal Estate Pro – Property Management And Submission 2
• Opal Membership 2
• Opal Woo Custom Product Variation 2

Newest

• wpopal opal service WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability CVE-2025-62913 6.5 MediumOctober 27, 2025
• wpopal opal estate pro – property management and submission Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user' CVE-2025-6934 Public exploit EPSS 25.4% 9.8 CriticalJuly 1, 2025
• wpopal gg bought together for woocommerce WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability CVE-2025-23967 9.3 CriticalJune 27, 2025
• wpopal opal woo custom product variation WordPress Opal Woo Custom Product Variation plugin <= 1.2.0 - Arbitrary File Deletion Vulnerability CVE-2025-47535 8.6 HighMay 23, 2025
• wpopal opal portfolio WordPress Opal Portfolio Plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability CVE-2025-31748 6.5 MediumApril 1, 2025
• wpopal opal woo custom product variation WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability CVE-2024-52444 7.5 HighNovember 20, 2024
• gutengeek free gutenberg blocks, wpopal gutengeek free gutenberg blocks for wordpress +1 more GutenGeek Free Gutenberg Blocks for WordPress <= 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload CVE-2024-9073 6.4 MediumSeptember 25, 2024
• wpopal opal membership Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting CVE-2024-7649 6.1 MediumAugust 10, 2024
• wpopal opal membership Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure CVE-2024-7648 4.3 MediumAugust 10, 2024
• wpopal opal estate pro – property management and submission, opal estate pro +1 more Opal Estate Pro – Property Management and Submission <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-3666 6.4 MediumMay 22, 2024
• wpopal opal widgets for elementor WordPress Opal Widgets For Elementor plugin <= 1.6.9 - Cross Site Scripting (XSS) vulnerability CVE-2024-33649 6.5 MediumApril 29, 2024
• agence-press css adder, amo for wp – membership management arcstone, arun basil lal admin css mu +18 more +20 more Server Side Request Forgery (SSRF) vulnerability affecting multiple WordPress plugins CVE-2022-40700 8.2 HighJanuary 19, 2024
• gutengeek gg woo feed, wpopal gg woo feed for woocommerce shopping feed on google and other channels +1 more GTG Product Feed for Shopping <= 1.2.4 - Missing Authorization to Unauthenticated Plugin Settings Update CVE-2023-6638 6.5 MediumJanuary 11, 2024
• wpopal opal estate Opal Estate <= 1.6.11 - Missing Authorization CVE-2021-4388 4.3 MediumJuly 1, 2023
• wpopal opal estate Opal Estate <= 1.6.11 - Cross-Site Request Forgery Bypass CVE-2021-4387 4.3 MediumJuly 1, 2023
• wpopal opal hotel room booking, opal hotel room booking (wordpress plugin) +1 more WordPress Opal Hotel Room Booking plugin <= 1.2.7 - Stored Cross-Site Scripting (XSS) vulnerability CVE-2022-29449 4.1 MediumMay 19, 2022