Resources /
WordPress Plugins /
Oxyextras
PLUGIN SECURITY
Is Oxyextras safe?
Known vulnerabilities, PHP compatibility and safer alternatives for the Oxyextras WordPress plugin — checked against WP Clinic's local security database.
What this plugin does
Maintenance status
Known vulnerabilities
1 known CVE on file for Oxyextras.
Reported between 2024 and 2024.
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-29129
|
OxyExtras [oxyextras] < 1.4.5 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.1
|
< 1.4.5
|
1.4.5 |
2024-03-16 |
—
|
CVE-2024-29129
Update the WordPress OxyExtras plugin to the latest available version (at least 1.4.5).
Kursat Cetin discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress OxyExtras Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.4.5.
This vulnerability was reported to and published by Patchstack. Our users receive alerts and protections up to 48 hours in advance.
Have additional information or questions about this entry? Get in touch.
Source:
Patchstack
How to fix it
Update this plugin to the latest release from wordpress.org — each CVE above lists the exact release that fixed it ("Fixed in") when one is on file.
This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.
Check your own WordPress site
Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.