WordPress plugin
Ocean eComm Treasure Box security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium0
- Low0
All Ocean eComm Treasure Box vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'content' Parameter ≤1.5.4Update to 1.5.5 | CVE-2026-81929 |
- High7.2Unauthenticated Stored Cross-Site Scripting via 'content' Parameter
≤1.5.4Update to 1.5.5
Ocean eComm Treasure Box: common questions
Does Ocean eComm Treasure Box have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Ocean eComm Treasure Box: 1 high. None are known to affect version null.
How do I check which version of Ocean eComm Treasure Box I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ocean eComm Treasure Box vulnerability?
CVE-2026-81929, published Oct 8, 2026: Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter. Severity: High (CVSS 7.2).
Is any Ocean eComm Treasure Box vulnerability listed in CISA KEV?
No. None of the known Ocean eComm Treasure Box vulnerabilities is currently listed in the CISA KEV catalog.