Skip to content
OpenAdvisories

Vendor

Oxygen Builder

3 known vulnerabilities.

Products

Oxygen Builder 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-4662

    Oxygen Builder <= 4.8.2 - Authenticated (Contributor+) Remote Code Execution

    The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8.2 via post metadata. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible f…

    Oxygen Builder Oxygen Builder Web / CMS