https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T05:09:06.304337+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-13307 CVE-2025-13307 — Ocean Modal Window < 2.3.3 - Editor+ Remote Code Execution via Modal Conditions 2026-10-16T05:09:06.305599+00:00

Affected: Unknown Ocean Modal Window

The Ocean Modal Window WordPress plugin before 2.3.3 is vulnerable to Remote Code Execution via the modal display logic. These modals can be displayed under user-controlled conditions that Editors and Administrators can set (edit_pages capability). The conditions are then executed as part of an eval statement executed on every site page. This leads to remote code execution.