CVE-2025-26924: WordPress Ohio Theme Extra plugin <= 3.4.7 - Shortcode Injection vulnerability
Published Mar 15, 2025
·Updated
Improper Control of Generation of Code ('Code Injection') vulnerability in colabrio Ohio Extra ohio-extra allows Code Injection.This issue affects Ohio Extra: from n/a through <= 3.4.7.
Affected Software
1 affected component
Colabrio Ohio Extra (WordPress plugin)<=3.4.7
Event History
Mar 15, 2025
CVE Published
via MITRE·09:57 PM
Data Sourced
via MITRE·09:57 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-26924?
CVE-2025-26924 has a moderate severity level due to its potential for code injection.
2
How do I fix CVE-2025-26924?
To fix CVE-2025-26924, upgrade Ohio Extra and the Ohio Theme Extra plugin to version 3.4.8 or higher.
3
What types of attacks can CVE-2025-26924 facilitate?
CVE-2025-26924 can facilitate code injection attacks, allowing attackers to execute arbitrary code.
4
Which versions of Ohio Extra are affected by CVE-2025-26924?
CVE-2025-26924 affects Ohio Extra versions up to and including 3.4.7.
5
Is CVE-2025-26924 specific to WordPress?
Yes, CVE-2025-26924 is specifically associated with the Ohio Theme Extra plugin for WordPress.