Approved changes feed: RSS · Atom

cpe:2.3:a:soflyy:oxygen_builder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSoflyy (87a26a9e-acd4-5262-bca3-fa77ab4eb5d0)
ProductOxygen Builder (6f1c0a4a-e9ca-590e-bc9a-effa2be5a1dc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31380 vulnerable 2026-06-08 06:35:31.392361 WordPress Oxygen plugin <= 4.9 - Authenticated Remote Code Execution (RCE) vulnerability
CRITICAL (9.9)
Improper Control of Generation of Code ('Code Injection') vulnerability in Soflyy Oxygen Builder allows Code Injection. Vendor is ignoring report, refuses to patch the issue.This issue affects Oxygen Builder: from n/a through 4.9.
Published: 2024-04-03T11:41:27.576Z
Updated: 2026-04-28T16:09:31.687Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-46841 vulnerable 2026-06-08 05:50:39.620304 WordPress Oxygen Builder Plugin < 4.4 is vulnerable to Cross Site Request Forgery (CSRF)
MEDIUM (5.4)
Cross-Site Request Forgery (CSRF) vulnerability in Soflyy Oxygen Builder plugin <= 4.4 versions.
Published: 2023-10-03T10:10:54.809Z
Updated: 2026-04-28T16:07:55.230Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.