TI-2026-67920 CVE-2026-32571 · GHSA-8mpj-rg2x-vv7j
Cross-site scripting in Colabrio Ohio Extra WordPress plugin
Priority LOW 28
Subscriber Cross Site Scripting (XSS) in Ohio Extra <= 3.6.8 versions.
Vulnerabilities
6 records
TI-2025-39668 CVE-2025-64225 · GHSA-3v85-pf4r-695w
WordPress Stockie Extra plugin <= 1.2.11 - Content Injection vulnerability
Priority LOW 29
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Stockie Extra stockie-extra allows Code Injection.This issue affects Stockie Extra: from n/a through <= 1.2.11.
TI-2025-40001 CVE-2025-64633 · GHSA-fmgq-3xhh-hjgc
WordPress Norebro Extra plugin <= 1.6.8 - Content Injection vulnerability
Priority LOW 30
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in colabrio Norebro Extra norebro-extra allows Code Injection.This issue affects Norebro Extra: from n/a through <= 1.6.8.
TI-2025-39798 CVE-2025-64365 · GHSA-r2w4-795m-g75f
WordPress Ohio Extra plugin <= 3.6.0 - Cross Site Scripting (XSS) vulnerability
Priority LOW 28
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in colabrio Ohio Extra ohio-extra allows DOM-Based XSS.This issue affects Ohio Extra: from n/a through <= 3.6.0.
TI-2025-39669 CVE-2025-64226 · GHSA-8w5m-hc8r-mmm9
WordPress Stockie Extra plugin <= 1.2.11 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in colabrio Stockie Extra stockie-extra allows Cross Site Request Forgery.This issue affects Stockie Extra: from n/a through <= 1.2.11.
TI-2025-19795 CVE-2025-26924 · GHSA-2rw2-xw4x-5r3h
WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability
Priority LOW 30
Improper Control of Generation of Code ('Code Injection') vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through <= 3.4.7.