Cross-site Scripting Vulnerability in OceanWP Ocean Extra Plugin

CVE-2025-49068

What is CVE-2025-49068?

The OceanWP Ocean Extra plugin is susceptible to a Cross-site Scripting (XSS) vulnerability stemming from improper input neutralization during web page generation. This flaw allows attackers to exploit the plugin by injecting malicious scripts, potentially compromising the security of the affected website. With versions ranging from n/a through 2.4.8 affected, it is crucial for users of this plugin to apply necessary updates and employ security best practices to protect their sites from such vulnerabilities.

References