🔍 What is Ocean Extra?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2019-16250

HIGH CVSS 7.5 Sep 11, 2019

CVE-2019-16250 is an unauthenticated vulnerability in the Ocean Extra WordPress plugin that allows attackers to modify plugin settings and inject malicious CSS. This affects all WordPress sites runnin...

CVE-2025-3458

MEDIUM CVSS 6.4 Apr 22, 2025

The Ocean Extra WordPress plugin contains a stored cross-site scripting (XSS) vulnerability that allows authenticated attackers with Contributor-level access or higher to inject malicious scripts into...

CVE-2024-37489

MEDIUM CVSS 6.5 Jul 21, 2024

This vulnerability allows authenticated attackers to inject malicious scripts into WordPress pages using the Ocean Extra plugin. When executed, these scripts can steal session cookies, redirect users,...