Vendors / Oxygen Builder Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Oxygen Builder records in CISA KEV No Oxygen Builder vulnerabilities are listed in CISA KEV.
Priority MEDIUM 42
The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8.2 via post metadata.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0085 · Published 2024-05-23 · No fix listed CWE-94
Priority LOW 20
The Oxygen Builder plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the oxy_save_css_from_admin AJAX action in all versions up to, and including, 4.8.3.
CVSS 3.1 MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00314 · Published 2024-08-27 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
0 1 1 0 0
