Optiontree Project Optiontree
5 CVEs affecting Optiontree Project Optiontree. Latest disclosed: 2019-08-22. Critical: 3, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-15321 | Critical | 9.8 | 2019-08-22 | The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled. |
CVE-2019-15320 | Critical | 9.8 | 2019-08-22 | The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled. |
CVE-2019-15319 | Critical | 9.8 | 2019-08-22 | The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce. |
CVE-2016-10895 | Medium | 6.1 | 2019-08-20 | The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request. |
CVE-2015-9320 | Medium | 6.1 | 2019-08-20 | The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg. |