dbcve.org
Vulnerability index

Browse CVEs

5 matching
Cards Compact
Filters 1 Clear all
Severity

Filters apply as you choose them.

Top technology Linux 13140 Google 12536 Microsoft 12379 Oracle 6843 Apple 6692 Adobe 6387 Ibm 6336 Cisco 5759 Debian 3919 Mozilla 2895 Apache 2864 Redhat 2592
Optiontree CRITICAL 9.8
CVE-2019-15319

The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.

Fix: 2.7.0+
Fix from $2,300 2019-08-22
Optiontree CRITICAL 9.8
CVE-2019-15320

The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.

Fix: 2.7.3+
Fix from $2,300 2019-08-22
Optiontree CRITICAL 9.8
CVE-2019-15321

The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.

Fix: 2.7.3+
Fix from $2,300 2019-08-22
Optiontree MEDIUM 6.1
CVE-2015-9320

The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.

Fix: 2.5.4+
Fix from $1,600 2019-08-20
Optiontree MEDIUM 6.1
CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.

Fix: 2.6.0+
Fix from $1,600 2019-08-20