1.1.2

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-31	CVE-2022-3374	Unspecified vulnerability in Oceanwp Ocean Extra The Ocean Extra WordPress plugin before 2.0.5 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog. network low complexity oceanwp	7.2
2022-06-20	CVE-2021-25104	Unspecified vulnerability in Oceanwp Ocean Extra The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue network low complexity oceanwp	6.1
2019-09-11	CVE-2019-16250	Improper Authentication vulnerability in Oceanwp Ocean Extra includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets (CSS) token sequence. network low complexity oceanwp CWE-287	7.5