Browse all 6 CVE security advisories affecting omnipressteam. AI-powered Chinese analysis, POCs, and references for each vulnerability.
Omnipressteam develops enterprise collaboration platforms with a core focus on real-time communication and document management. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from improper input validation and access control flaws. The organization has addressed six CVEs to date, with some instances allowing unauthenticated attackers to execute arbitrary code or access sensitive data. While no major public security incidents have been documented, their vulnerability history suggests a pattern of authentication and authorization weaknesses that could potentially lead to system compromise if not properly mitigated.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-25432 | WordPress Omnipress plugin <= 1.6.7 - Cross Site Scripting (XSS) vulnerability — OmnipressCWE-79 | 6.5 | Medium | 2026-02-19 |
| CVE-2026-24538 | WordPress Omnipress plugin <= 1.6.7 - Local File Inclusion vulnerability — OmnipressCWE-98 | 7.5 | High | 2026-01-23 |
| CVE-2025-12163 | Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting — OmnipressCWE-79 | 6.4 | Medium | 2025-12-05 |
| CVE-2025-53276 | WordPress Omnipress plugin <= 1.6.4 - Cross Site Scripting (XSS) vulnerability — OmnipressCWE-79 | 6.5 | Medium | 2025-06-27 |
| CVE-2024-13407 | Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure — OmnipressCWE-639 | 4.3 | Medium | 2025-03-14 |
| CVE-2024-49278 | WordPress Omnipress plugin <= 1.4.3 - Cross Site Scripting (XSS) vulnerability — OmnipressCWE-79 | 6.5 | High | 2024-10-17 |
This page lists every published CVE security advisory associated with omnipressteam. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.