Analysis and contextual insights are available on OpenCVE Cloud.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
No reference.
Thu, 01 Oct 2026 10:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability | |
| Weaknesses | CWE-79 | |
| References |
|
|
| Metrics |
cvssV3_1
|
Thu, 01 Oct 2026 10:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions. | This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. False positive detection. |
Fri, 25 Sep 2026 05:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Wed, 23 Sep 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Oceanwp
Oceanwp ocean Extra Wordpress Wordpress wordpress |
|
| Vendors & Products |
Oceanwp
Oceanwp ocean Extra Wordpress Wordpress wordpress |
Wed, 23 Sep 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Contributor Cross Site Scripting (XSS) in Ocean Extra <= 2.6.1 versions. | |
| Title | WordPress Ocean Extra plugin <= 2.6.1 - Cross Site Scripting (XSS) vulnerability | |
| Weaknesses | CWE-79 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: REJECTED
Assigner: Patchstack
Published:
Updated: 2026-10-01T09:43:47.920Z
Reserved: 2026-09-22T00:19:50.792Z
Link: CVE-2026-94684
Updated:
Status : Rejected
Published: 2026-09-23T19:19:50.790
Modified: 2026-10-01T10:17:17.537
Link: CVE-2026-94684
No data.
OpenCVE Enrichment
Updated: 2026-09-23T23:15:10Z
No weakness.