PLUGIN SECURITY

Is Oxygen safe?

FDP add-on to cleanup Oxygen in the backend. Your Oxygen backend will be faster and without conflicts with other plugins.

What this plugin does

  • Slug: oxygen
  • Author: Jose Mortellaro
  • 100+ active installs
  • 100/100 rating (1 review on wordpress.org)
  • 4203 all-time downloads
  • On WordPress.org since 2021-12-14

cleanupconflictsdebuggingoxygenperformance

Maintenance status

  • Latest known version: 10.1
  • Last updated: 2026-05-21 9:09am GMT
  • Tested up to WordPress: 7.0.4
  • Requires PHP: 5.6+

Known vulnerabilities

1 known CVE on file for Oxygen. Reported between 2023 and 2026.

CVE Vulnerability Type Severity Affected Fixed in Published Status
Oxygen [oxygen] < 6.1.2 Unknown < 6.1.2 6.1.2 2026-08-31 ✓ fixed in latest
Oxygen [oxygen] <= 4.9 (unfixed) Improper Control of Generation of Code ('Code Injection') Critical 9.9 < 4.9 4.9 2024-04-03 ✓ fixed in latest
CVE-2022-46841 Oxygen [oxygen] < 4.4 Cross-Site Request Forgery (CSRF) Medium 5.4 < 4.4 4.4 2023-07-20 ✓ fixed in latest
Oxygen [oxygen] >= 6.0 - < 6.1.2 Unknown 6.0–6.1.2 6.1.2 2023-07-20 ✓ fixed in latest

How to fix it

Keep Oxygen updated — 10.1 is the latest version on wordpress.org, and each CVE above lists the exact release that fixed it ("Fixed in").

This is the plugin's full known vulnerability history, not a scan of any specific installation — run a free scan of your own site to check your exact installed version.

Safer / more established alternatives

Check your own WordPress site

Run a free passive scan now, or create a free account and install the WP Clinic plugin for a deep scan of your whole hosting account and AI-assisted repair.