Skip to content
OpenAdvisories

Product · OwnerRez

OwnerRez API

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-81758

    WordPress OwnerRez API plugin <= 1.2.6 - Broken Access Control vulnerability

    Subscriber Broken Access Control in OwnerRez API <= 1.2.6 versions.

    OwnerRez OwnerRez API
  • Medium 6.5
    CVE-2025-28957

    WordPress OwnerRez API plugin <= 1.2.1 - Cross Site Scripting (XSS) Vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OwnerRez OwnerRez API ownerrez allows Stored XSS.This issue affects OwnerRez API: from n/a through <= 1.2.1.

    OwnerRez OwnerRez API
  • Medium 4.3
    CVE-2025-31814

    WordPress OwnerRez Plugin <= 1.2.0 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in OwnerRez OwnerRez API ownerrez allows Cross Site Request Forgery.This issue affects OwnerRez API: from n/a through <= 1.2.0.

    OwnerRez OwnerRez API