What’s Vulnerable › Products

Oxygen Builder vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Oxygen Builder version is affected

Latest Oxygen Builder vulnerabilities

• CVE-2024-6688 — Oxygen Builder <= 4.8.3 - Missing Authorization to Authenticated (Subscriber+) Stylesheet Update (CVSS 4.3)
• CVE-2024-4662 — Oxygen Builder <= 4.8.2 - Authenticated (Contributor+) Remote Code Execution (CVSS 8.8)
• CVE-2024-31380 — WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability (CVSS 9.9)
• CVE-2023-6938 — Oxygen Builder <= 4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Field (CVSS 5.4)
• CVE-2022-46841 — WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF) (CVSS 8.8)