Filtered by vendor Optiontree Project Subscriptions
Total 5 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2015-9320 1 Optiontree Project 1 Optiontree 2024-08-06 6.1 Medium
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
CVE-2016-10895 1 Optiontree Project 1 Optiontree 2024-08-06 N/A
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
CVE-2019-15321 1 Optiontree Project 1 Optiontree 2024-08-05 N/A
The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.
CVE-2019-15319 1 Optiontree Project 1 Optiontree 2024-08-05 N/A
The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.
CVE-2019-15320 1 Optiontree Project 1 Optiontree 2024-08-05 N/A
The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.