oceanwp

Records32All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

oceanwp records in CISA KEV

No oceanwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ocean Extra 14 records HIGH Oceanwp 2 records MEDIUM Sticky Header 1 record LOW

Records

2 records in Oceanwp · all components

TI-2025-08191 CVE-2025-8944 · GHSA-889q-5rwf-r9hj

OceanWP < 4.1.2 - Subscriber+ Limited Option Update

MEDIUM 53

The OceanWP WordPress theme before 4.1.2 is vulnerable to an option update due to a missing capability check on one of its AJAX request handler, allowing any authenticated users, such as subscriber to update the darkMod`…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00232 Published 2025-09-05 Fixed in 4.1.2 CWE-862

TI-2025-08139 CVE-2025-8891 · GHSA-749m-qq5p-qp89

OceanWP <= 4.0.9 - 4.1.1 - Cross-Site Request Forgery to Ocean Extra Plugin Installation

MEDIUM 53

The OceanWP theme for WordPress is vulnerable to Cross-Site Request Forgery in versions 4.0.9 to 4.1.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00226 Published 2025-08-13 No fix listed CWE-352

Open these records in search →

Critical	1
High	6
Medium	25
Low	0
No CVSS	0