Optiontree CVEs and Security Vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2019-15321

The option-tree plugin before 2.7.3 for WordPress has Object Injection because serialized classes are mishandled.

CVSS 3.0 · 9.8 Critical EPSS 2.1% KEV · Not listed

Vendors

Optiontree Project

Products

Optiontree

CVE-2019-15320

The option-tree plugin before 2.7.3 for WordPress has Object Injection because the + character is mishandled.

CVSS 3.0 · 9.8 Critical EPSS 2.1% KEV · Not listed

Vendors

Optiontree Project

Products

Optiontree

CVE-2019-15319

The option-tree plugin before 2.7.0 for WordPress has Object Injection by leveraging a valid nonce.

CVSS 3.0 · 9.8 Critical EPSS 2.1% KEV · Not listed

Vendors

Optiontree Project

Products

Optiontree

CVE-2016-10895

The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Optiontree Project

Products

Optiontree

CVE-2015-9320

The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Optiontree Project

Products

Optiontree

Page 1 of 1.