Skip to content
OpenAdvisories

Vendor

OceanWP

24 known vulnerabilities.

Products

Ocean Extra 15 OceanWP 6 Ocean Product Sharing 1 Ocean Pro Demos 1 Ocean eComm Treasure Box 1 Ocean Social Sharing 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.1
    CVE-2026-115592

    WordPress OceanWP theme <= 4.2.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OceanWP OceanWP oceanwp allows Reflected XSS.This issue affects OceanWP: from n/a through 4.2.7.

    OceanWP OceanWP
  • High 7.2
    CVE-2026-81929

    Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter

    The Ocean Pro Demos and Ocean eComm Treasure Box plugins for WordPress is vulnerable to Stored Cross-Site Scripting via the 'content' parameter in all versions up to, and including, 1.5.4, and 1.8.0, respectively, due to insufficient authorization, input sani…

    OceanWP Ocean eComm Treasure Box Ocean Pro Demos
  • High 7.6
    CVE-2023-23700

    WordPress OceanWP theme <= 3.4.1 - Authenticated Local File Inclusion vulnerability

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OceanWP allows PHP Local File Inclusion.This issue affects OceanWP: from n/a through 3.4.1.

    OceanWP OceanWP