1.5.11

DATE	CVE	VULNERABILITY TITLE	RISK
2022-10-31	CVE-2022-3374	Unspecified vulnerability in Oceanwp Ocean Extra The Ocean Extra WordPress plugin before 2.0.5 unserialises the content of an imported file, which could lead to PHP object injections issues when a high privilege user import (intentionally or not) a malicious Customizer Styling file and a suitable gadget chain is present on the blog. network low complexity oceanwp	7.2
2022-06-20	CVE-2021-25104	Unspecified vulnerability in Oceanwp Ocean Extra The Ocean Extra WordPress plugin before 1.9.5 does not escape generated links which are then used when the OceanWP is active, leading to a Reflected Cross-Site Scripting issue network low complexity oceanwp	6.1