Read the docs

omnipressteam

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

omnipressteam records in CISA KEV

No omnipressteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Omnipress 1 record LOW

Records

6 records

TI-2026-19778 CVE-2026-24538 · GHSA-382j-74x3-hwj5

WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: fro…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00462 Published 2026-01-23 No fix listed CWE-98
TI-2025-11152 CVE-2025-12163 · GHSA-974v-472p-48vr

Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting

Priority LOW 29

The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00385 Published 2025-12-05 No fix listed CWE-79
TI-2024-32871 CVE-2024-49278 · GHSA-pgcr-54pm-cg8m

WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through <= 1.4.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00287 Published 2024-10-17 No fix listed CWE-79
TI-2024-12449 CVE-2024-13407 · GHSA-wh4v-h3gp-f38v

Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure

Priority LOW 29

The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00276 Published 2025-03-14 No fix listed CWE-639
TI-2026-20548 CVE-2026-25432 · GHSA-p362-fjq5-7p9h

WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through <= 1.6.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00191 Published 2026-02-19 No fix listed CWE-79
TI-2025-33243 CVE-2025-53276 · GHSA-4g4q-fph6-6vcc

WordPress Omnipress plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows DOM-Based XSS.This issue affects Omnipress: from n/a through <= 1.6.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-27 No fix listed CWE-79
Open these records in search →