wpopal vulnerabilities
16 published CVEs name wpopal among the affected products.
- 16Published CVEs16 of them scored
- 0Last 12 monthspublished in the last year
- 2Critical3 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2025-62913
WordPress Opal Service plugin <= 1.9.1 - Cross Site Scripting (XSS) vulnerability
wpopal · Opal Service
Medium6.5 - CVE-2025-6934
Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'
wpopal · Opal Estate Pro – Property Management and Submission
Critical9.8 - CVE-2025-23967
WordPress GG Bought Together for WooCommerce plugin <= 1.0.2 - SQL Injection Vulnerability
wpopal · GG Bought Together for WooCommerce
Critical9.3 - CVE-2025-47535
WordPress Opal Woo Custom Product Variation plugin <= 1.2.0 - Arbitrary File Deletion Vulnerability
wpopal · Opal Woo Custom Product Variation
High8.6 - CVE-2025-31748
WordPress Opal Portfolio Plugin <= 1.0.4 - Stored Cross Site Scripting (XSS) vulnerability
wpopal · Opal Portfolio
Medium6.5 - CVE-2024-52444
WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability
wpopal · Opal Woo Custom Product Variation
High7.5 - CVE-2024-9073
GutenGeek Free Gutenberg Blocks for WordPress <= 1.1.3 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
wpopal · GutenGeek Free Gutenberg Blocks for WordPress
Medium6.4 - CVE-2024-7649
Opal Membership <= 1.2.4 - Unauthenticated Stored Cross-Site Scripting
wpopal · Opal Membership
Medium6.1 - CVE-2024-7648
Opal Membership <= 1.2.4 - Authenticated (Subscriber+) Information Disclosure
wpopal · Opal Membership
Medium4.3 - CVE-2024-3666
Opal Estate Pro – Property Management and Submission <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
wpopal · Opal Estate Pro – Property Management and Submission
Medium6.4