Skip to content
OpenAdvisories

Vendor

wpopal

16 known vulnerabilities.

Products

Opal Estate 2 Opal Estate Pro – Property Management and Submission 2 Opal Membership 2 Opal Woo Custom Product Variation 2 Opal Service 1 GG Woo Feed for WooCommerce Shopping Feed on Google and Other Channels 1 Wpopal Core Features 1 Opal Hotel Room Booking (WordPress plugin) 1 GG Bought Together for WooCommerce 1 Opal Widgets For Elementor 1 GutenGeek Free Gutenberg Blocks for WordPress 1 Opal Portfolio 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-6934 Public exploit Scanner template EPSS 25%

    Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

    The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. This is due to a lack of role…

    wpopal Opal Estate Pro – Property Management and Submission Web / CMS
  • Critical 9.3
    CVE-2025-23967

    WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpopal GG Bought Together for WooCommerce gg-bought-together allows SQL Injection.This issue affects GG Bought Together for WooCommerce: from n/a through <= …

    wpopal GG Bought Together for WooCommerce Web / CMS