bobbingwide vulnerabilities and threats

9 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.2%	CVE-2026-96819oik (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2026-09-30CVE Database V5CVE-2026-96819 Subscriber Cross Site Scripting (XSS) in oik <= 4.15.4 versions. EPSS 0.2%Vulnerability bobbingwide CWE-79	CVE Database V5	2026-09-30
Medium	6.5	EPSS 0.2%	CVE-2025-67549oik (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-12-09CVE Database V5CVE-2025-67549 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bobbingwide oik oik allows DOM-Based XSS.This issue affects oik: from n/a through <= 4.15.3. EPSS 0.2%Vulnerability bobbingwide CWE-79	CVE Database V5	2025-12-09
High	7.1	EPSS 0.3%	CVE-2025-52743oik-privacy-policy (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2025-10-22CVE Database V5CVE-2025-52743 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bobbingwide oik-privacy-policy oik-privacy-policy allows Reflected XSS.This issue affects oik-privacy-policy: from n/a through <= 1.4.10. EPSS 0.3%Vulnerability bobbingwide	CVE Database V5	2025-10-22
High	7.1	EPSS 0.2%	CVE-2025-54670oik (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.2%2025-08-20CVE Database V5CVE-2025-54670 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bobbingwide oik oik allows Reflected XSS.This issue affects oik: from n/a through <= 4.15.2. EPSS 0.2%Vulnerability bobbingwide	CVE Database V5	2025-08-20
Medium	4.3	EPSS 0.1%	CVE-2025-54671oik (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-08-14CVE Database V5CVE-2025-54671 Cross-Site Request Forgery (CSRF) vulnerability in bobbingwide oik oik allows Cross Site Request Forgery.This issue affects oik: from n/a through <= 4.15.2. EPSS 0.1%Vulnerability bobbingwide	CVE Database V5	2025-08-14
Medium	5.3	EPSS 0.3%	CVE-2025-49241oik (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.3%2025-06-06CVE Database V5CVE-2025-49241 Missing Authorization vulnerability in bobbingwide oik oik allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects oik: from n/a through <= 4.15.1. EPSS 0.3%Vulnerability bobbingwide	CVE Database V5	2025-06-06
Medium	4.3	EPSS 0.2%	CVE-2024-43356oik (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-08-26CVE Database V5CVE-2024-43356 Cross-Site Request Forgery (CSRF) vulnerability in bobbingwide.This issue affects oik: from n/a through 4.12.0. EPSS 0.2%Vulnerability bobbingwide CWE-352	CVE Database V5	2024-08-26
Medium	6.4	EPSS 0.3%	CVE-2024-6391oik (WordPress plugin) · Cross-site Scripting Medium6.4EPSS 0.3%2024-07-09CVE Database V5CVE-2024-6391 The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's bw_button shortcode in all versions up to, and including, 4.10.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.3%Vulnerability bobbingwide CWE-79	CVE Database V5	2024-07-09
Medium	6.4	EPSS 0.4%	CVE-2024-2256oik (WordPress plugin) · Cross-site Scripting Medium6.4EPSS 0.4%2024-03-14CVE Database V5CVE-2024-2256 The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes such as bw_contact_button and bw_button shortcodes in all versions up to, and including, 4.10.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. EPSS 0.4%Vulnerability bobbingwide CWE-79	CVE Database V5	2024-03-14

Page 1 of 1