oik vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

OI

Product

oik

by bobbingwide · last CVE Sep 30, 2026

7

CVEs

0

On KEV

7.1

Max CVSS

1

New 30D

Vulnerabilities7 In the news0 Timeline

Severity mix

Critical 0High 2Medium 5Low 0

Severity

All severities7 Critical0 High2 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add oik to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-96819	7.1	0%	Sep 30	WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability Affected: through 4.15.4
CVE-2025-54670	7.1	0%	Aug 20	WordPress oik Plugin <= 4.15.2 - Cross Site Scripting (XSS) Vulnerability Affected: through 4.15.2
CVE-2025-67549	6.5	0%	Dec 9	WordPress oik plugin <= 4.15.3 - Cross Site Scripting (XSS) vulnerability Affected: through 4.15.3
CVE-2024-2256	5.4	0%	Mar 14	The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes such as bw_contact_button and bw_button shortcodes in all versions up to, and… Affected: before 4.10.2
CVE-2025-49241	5.3	0%	Jun 6	WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability Affected: through 4.15.1
CVE-2025-54671	4.3	0%	Aug 14	WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability Affected: through 4.15.2
CVE-2024-43356	4.3	0%	Aug 26	Cross-Site Request Forgery (CSRF) vulnerability in bobbingwide.This issue affects oik: from n/a through 4.12.0 Affected: before 4.12.1