Oxygen Builder Oxygen Builder
3 CVEs affecting Oxygen Builder Oxygen Builder. Latest disclosed: 2024-08-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4662 | High | 8.8 | 2024-05-23 | The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8.2 via post metadata. This is due to th… |
CVE-2023-6938 | Medium | 6.4 | 2024-01-11 | The Oxygen Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a custom field in all versions up to, and including, 4.8 due to insuff… |
CVE-2024-6688 | Medium | 4.3 | 2024-08-27 | The Oxygen Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the oxy_save_css_from_admin AJA… |