Oxygen vulnerabilities

2 known vulnerabilities in Oxygen from Soflyy. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oxygen Builder: Improper Control of Generation of Code

  CVE-2024-4662May 23, 2024Oxygen Builder

  The Oxygen Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.8.2 via post metadata. This is due to the plugin storing custom data in post metadata without an underscore prefix. This makes it possible fo

• 9.9 Critical severity

  Oxygen Builder: Improper Control of Generation of Code

  CVE-2024-31380Apr 3, 2024Soflyy

  Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Oxygen Builder allows Code Injection. Vendor is ignoring report, refuses to patch the issue.This issue affects Oxygen Builder: from n/a through 4.9.