wpopal vulnerabilities

CVEs per yearBy the year they were published

1. 20221
2. 20232
3. 20248
4. 20255

Newest CVEs

• CVE-2025-62913

  WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability

  wpopal · Opal Service

  Medium6.5
• CVE-2025-6934

  Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

  wpopal · Opal Estate Pro – Property Management and Submission

  Critical9.8
• CVE-2025-23967

  WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability

  wpopal · GG Bought Together for WooCommerce

  Critical9.3
• CVE-2025-47535

  WordPress Opal Woo Custom Product Variation plugin <= 1.2.0 - Arbitrary File Deletion Vulnerability

  wpopal · Opal Woo Custom Product Variation

  High8.6
• CVE-2025-31748

  WordPress Opal Portfolio Plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability

  wpopal · Opal Portfolio

  Medium6.5
• CVE-2024-52444

  WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability

  wpopal · Opal Woo Custom Product Variation

  High7.5
• CVE-2024-9073

  GutenGeek Free Gutenberg Blocks for WordPress <= 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload

  wpopal · GutenGeek Free Gutenberg Blocks for WordPress

  Medium6.4
• CVE-2024-7649

  Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting

  wpopal · Opal Membership

  Medium6.1
• CVE-2024-7648

  Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure

  wpopal · Opal Membership

  Medium4.3
• CVE-2024-3666

  Opal Estate Pro – Property Management and Submission <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting

  wpopal · Opal Estate Pro – Property Management and Submission

  Medium6.4