Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: omnipressteam Clear all filters
TI-2026-20548 CVE-2026-25432 · GHSA-p362-fjq5-7p9h

WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through <= 1.6.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00191 Published 2026-02-19 No fix listed CWE-79
TI-2026-19778 CVE-2026-24538 · GHSA-382j-74x3-hwj5

WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability

Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in omnipressteam Omnipress omnipress allows PHP Local File Inclusion.This issue affects Omnipress: fro…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00462 Published 2026-01-23 No fix listed CWE-98
TI-2025-11152 CVE-2025-12163 · GHSA-974v-472p-48vr

Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting

Priority LOW 29

The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00385 Published 2025-12-05 No fix listed CWE-79
TI-2025-33243 CVE-2025-53276 · GHSA-4g4q-fph6-6vcc

WordPress Omnipress plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows DOM-Based XSS.This issue affects Omnipress: from n/a through <= 1.6.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00236 Published 2025-06-27 No fix listed CWE-79
TI-2024-12449 CVE-2024-13407 · GHSA-wh4v-h3gp-f38v

Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure

Priority LOW 29

The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00276 Published 2025-03-14 No fix listed CWE-639
TI-2024-32871 CVE-2024-49278 · GHSA-pgcr-54pm-cg8m

WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through <= 1.4.3.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00287 Published 2024-10-17 No fix listed CWE-79