[ Vendor · 2 CVEs ]
OceanWP
CVEs affecting OceanWP published in the last 30 days, plus any OceanWP CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-86803 | 15 Oct 2026 | CVSS 6.5 | oceanwp Ocean ExtraThe The Ocean Extra plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 2.6.0 This is due to… | |
| CVE-2026-81929 | 9 Oct 2026 | CVSS 7.2 | OceanWP Ocean Pro DemosThe Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in… |