Norse Rune Oracle Plugin

Norse Rune Oracle Plugin has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 6.3, and the most serious one scores 6.4 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Cross-Site Scripting.

Every one of the 2 issues recorded for Norse Rune Oracle Plugin has a vendor fix available, so running the current release closes all known holes.

All of these findings were reported by SOPROBRO. Norse Rune Oracle Plugin is installed on roughly 50 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.7.7.

Strategic Overview

Avg CVSSMedium
6.3/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all Norse Rune Oracle Plugin vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.4CVE-2025-31884

Norse Rune Oracle Plugin <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
Plugin Profile
Latestv1.4.4

Norse Rune Oracle Plugin

WP CMS Ninja

Author

WP CMS Ninja

4.7(6)
94/100
Last Updated
2025-04-01 (2y ago)
Active Installs
50+
Downloads
5,721
Requires WP
3.5.1+
Requires PHP
0+
Tested up to
WP 6.7.7
Created
2013-02-01 (14y ago)

Norse Runes are an ancient alphabet used in Germanic countries. Today, they are used in magic and divination by many Pagans and Wiccans. Although their meanings can sometimes be a bit obscure, most people who work with runes find that the best way to incorporate them into divination is to ask a specific question based upon your current situation. Although you don’t have to be of Norse ancestry to use the runes, you’ll have a far better understanding of the symbols and their meanings if you have some knowledge of the mythology and history of the Germanic peoples; this way you can interpret the runes in the context in which they were meant to be read. This Plugin allows you to use runes as a functioning part of your website. Here are some of the current features: Show all the Runes on a given page. Show a specific rune with meaning on a given page. Show the Definition of a given Rune by a Tool Tip or a Defined Definitions Page. Current Spreads Available Odin’s Rune (One Rune Layout) Past, Present and Future (Three Rune) Layout Expanded Celtic Cross Spread (Twelve Rune Layout) Custom Spread Features for Future Releases: Ability for people to create accounts and track readings over time. Ability to do different castings with Meanings and Interpretations. Some examples: Two Rune Layout Four Directions Layout Five Rune Cross Layout Midgard Serpent Layout Bifröst Layout Grid of Nine Layout Odin’s Nine Layout Egil’s Whalebone Layout Adding ability for someone to show any number of runes on a page so they could do their own rune spreads even if they are not known to the system.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C