OE
Product
Ocean Extra
by oceanwp · last CVE Oct 15, 2026
19
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 1High 3Medium 15Low 0
Watch

Add Ocean Extra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-49164
8.8
0%
Dec 19
WordPress Ocean Extra Plugin <= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
Affected: through 2.2.2
CVE-2019-16250
7.5
1%
Sep 11
includes/wizard/wizard.php in the Ocean Extra plugin through 1.5.8 for WordPress allows unauthenticated options changes and injection of a Cascading Style Sheets (CSS) token…
Affected: through 1.5.8
CVE-2022-3374
7.2
2%
Oct 31
Ocean Extra < 2.0.5 - Admin+ PHP Objection Injection
Affected: before 2.0.5
Showing 3