Oxygen vulnerabilities | LiveThreat CVE Feed

Product

Oxygen

by Soflyy · last CVE May 23, 2024

CVEs

On KEV

9.9

Max CVSS

New 30D

Severity mix

Critical 1High 2Medium 1Low 0

Severity

Exploitation

Watch

Add Oxygen to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-31380	9.9	1%	Apr 3	WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability Affected: through 4.8.2
CVE-2024-4662	8.8	1%	May 23	Oxygen Builder <= 4.8.2 - Authenticated (Contributor+) Remote Code Execution Affected: through 4.8.2
CVE-2022-46841	8.8	0%	Oct 3	WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) Affected: before 4.4
CVE-2023-6938	5.4	0%	Jan 11	Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field Affected: before 4.8.1