WordPress plugin
Ocean Modal Window security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
1Known vulnerabilities
- Critical0
- High1
- Medium0
- Low0
All Ocean Modal Window vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Authenticated (Editor+) Remote Code Execution ≤2.3.2Update to 2.3.3 | CVE-2025-13307 |
- High7.2Authenticated (Editor+) Remote Code Execution
≤2.3.2Update to 2.3.3
Ocean Modal Window: common questions
Does Ocean Modal Window have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Ocean Modal Window: 1 high. None are known to affect version null.
How do I check which version of Ocean Modal Window I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ocean Modal Window vulnerability?
CVE-2025-13307, published Nov 28, 2025: Ocean Modal Window <= 2.3.2 - Authenticated (Editor+) Remote Code Execution. Severity: High (CVSS 7.2).
Is any Ocean Modal Window vulnerability listed in CISA KEV?
No. None of the known Ocean Modal Window vulnerabilities is currently listed in the CISA KEV catalog.