WordPress plugin
Ocean Pro Demos security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 1 known vulnerability is fixed in the latest release. If you run an older version, update to null or newer.
- Critical0
- High1
- Medium0
- Low0
All Ocean Pro Demos vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| High7.2 | Unauthenticated Stored Cross-Site Scripting via 'content' Parameter ≤1.5.4Update to 1.5.5 | CVE-2026-81929 |
- High7.2Unauthenticated Stored Cross-Site Scripting via 'content' Parameter
≤1.5.4Update to 1.5.5
Ocean Pro Demos: common questions
Does Ocean Pro Demos have known vulnerabilities?
Yes. VulnCrest Radar lists 1 known vulnerability in Ocean Pro Demos: 1 high. None are known to affect version null.
How do I check which version of Ocean Pro Demos I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Ocean Pro Demos vulnerability?
CVE-2026-81929, published Oct 8, 2026: Ocean Pro Demos <= 1.5.4 and Ocean eComm Treasure Box <= 1.8.0 - Unauthenticated Stored Cross-Site Scripting via 'content' Parameter. Severity: High (CVSS 7.2).
Is any Ocean Pro Demos vulnerability listed in CISA KEV?
No. None of the known Ocean Pro Demos vulnerabilities is currently listed in the CISA KEV catalog.