omnipressteam

5 results · Clear filters · Feed

• Medium 6.5
  CVE-2026-25432

  WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through <= 1.6.7.

  omnipressteam Omnipress
  Feb 19, 2026
• Medium 6.4
  CVE-2025-12163 Public exploit

  Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting

  The Omnipress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, wi…

  omnipressteam Omnipress Web / CMS
  Dec 5, 2025
• Medium 6.5
  CVE-2025-53276

  WordPress Omnipress plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows DOM-Based XSS.This issue affects Omnipress: from n/a through <= 1.6.4.

  omnipressteam Omnipress
  Jun 27, 2025
• Medium 4.3
  CVE-2024-13407

  Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure

  The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, wi…

  omnipressteam Omnipress Web / CMS
  Mar 14, 2025
• Medium 6.5
  CVE-2024-49278

  WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in omnipressteam Omnipress omnipress allows Stored XSS.This issue affects Omnipress: from n/a through <= 1.4.3.

  omnipressteam Omnipress
  Oct 17, 2024