Skip to content
OpenAdvisories

Vendor

bobbingwide

10 known vulnerabilities.

Products

oik 8 oik-privacy-policy 1 SB Chart block 1
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-67549

    WordPress oik plugin <= 4.15.3 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bobbingwide oik oik allows DOM-Based XSS.This issue affects oik: from n/a through <= 4.15.3.

    bobbingwide oik
  • Medium 4.3
    CVE-2025-54671

    WordPress oik plugin <= 4.15.2 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in bobbingwide oik oik allows Cross Site Request Forgery.This issue affects oik: from n/a through <= 4.15.2.

    bobbingwide oik
  • Medium 5.3
    CVE-2025-49241

    WordPress oik plugin <= 4.15.1 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in bobbingwide oik oik allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects oik: from n/a through <= 4.15.1.

    bobbingwide oik
  • Medium 6.4
    CVE-2025-3661

    SB Chart block <= 1.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via className Parameter

    The SB Chart block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated…

    bobbingwide SB Chart block Web / CMS
  • Medium 4.3
    CVE-2024-43356

    WordPress oik plugin <= 4.12.0 - Arbitrary File Deletion vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in bobbingwide.This issue affects oik: from n/a through 4.12.0.

    bobbingwide oik
  • Medium 6.4
    CVE-2024-6391

    oik <= 4.10.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via bw_button Shortcode

    The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bw_button shortcode in all versions up to, and including, 4.10.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it p…

    bobbingwide oik Web / CMS
  • Medium 6.4
    CVE-2024-2256

    oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes such as bw_contact_button and bw_button shortcodes in all versions up to, and including, 4.10.0 due to insufficient input sanitization and output escaping on…

    bobbingwide oik Web / CMS