OceanWP OceanWP

• CVE-2026-115592 High 7.1 WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerability 0.2%
• CVE-2025-8891 Medium 4.3 OceanWP <= 4.0.9 - 4.1.1 - Cross-Site Request Forgery to Ocean Extra Plugin Installation 0.2%
• CVE-2024-5647 Medium 6.4 Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library 0.4%
• CVE-2025-5524 Medium 4.9 OceanWP <= 4.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Select HTML Tag 0.3%
• CVE-2023-23700 High 7.6 WordPress OceanWP theme <= 3.4.1 - Authenticated Local File Inclusion vulnerability 0.7%
• CVE-2024-2476 Medium 4.3 OceanWP <= 3.5.4 - Missing Authorization to Sensitive Information Exposure via Limited Local File Inclusion 0.4%