Omnipress

Omnipress has 6 disclosed vulnerabilities in the WordSec catalog, reported between 2024 and 2026; 4 are fixed and 2 remain unpatched as of September 2026. Their average CVSS score is 6.2, and the most serious one scores 7.5 out of 10. Severity breakdown: 0 critical and 1 high. 2025 was the busiest year with 3 disclosures.

The most common weakness is Cross-Site Scripting, behind 4 of the records (67%). Other recurring categories include Authorization Bypass Through User-Controlled Key, PHP Remote File Inclusion.

4 of the records (67%) have a vendor fix, while 2 remain unpatched. The oldest unresolved one dates back to 2026.

5 independent researchers contributed these findings, most of them (2) reported by Khalid Yusuf. Omnipress is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.9.7.

Strategic Overview

Avg CVSSMedium

6.2/ 10

Patch Coverage67%

Open

Fixed

Get automatic notifications for all Omnipress vulnerabilities before they are exploited.

Most severe open issueCVSS 7.5CVE-2026-24538

Omnipress <= 1.6.7 - Authenticated (Contributor+) Local File Inclusion

Read the full analysis

Vulnerability Records

6 records


2026-01-25 00:00	Omnipress <= 1.6.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Omnipress <= 1.6.7	`CVE-2026-25432`	6.4 Medium	theviper17	No
2026-01-24 00:00	Omnipress <= 1.6.7 - Authenticated (Contributor+) Local File Inclusion Omnipress <= 1.6.7	`CVE-2026-24538`	7.5 High	theviper17y	No
2025-12-04 16:31	Omnipress <= 1.6.5 - Authenticated (Author+) Stored Cross-Site Scripting Omnipress <= 1.6.5	`CVE-2025-12163`	6.4 Medium	Kai Aizen	Yes
2025-06-27 00:00	Omnipress <= 1.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting Omnipress <= 1.6.4	`CVE-2025-53276`	6.4 Medium	Khalid Yusuf	Yes
2025-03-13 00:00	Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure Omnipress <= 1.5.4	`CVE-2024-13407`	4.3 Medium	Nishiv	Yes
2024-10-15 00:00	Omnipress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting Omnipress <= 1.4.3	`CVE-2024-49278`	6.4 Medium	Khalid Yusuf	Yes

Showing 1–6 of 6 reports

Latestv1.6.7

Omnipress

Author

omnipress

5.0(1)

100/100

Last Updated

2026-01-08 (8mo ago)

Active Installs

800+

Downloads

49,083

Requires WP

5.8+

Requires PHP

7.4+

Tested up to

WP 6.9.7

Created

2022-05-04 (4y ago)

Power-up the Gutenberg editor with advanced patterns, custom blocks, and full site demos to build modern WordPress websites—effortlessly. With Omnipress, you get: – Pre-built Patterns, Blocks, and Demo Sites crafted for instant use. – Unique features like page transitions, site preloaders, custom query loops, and more. – Deep integration with Full Site Editing (FSE) and WooCommerce. 🎨 Browse the Pattern Library 🌐 Explore Demo Websites 🚀 Launch a Live Preview Why Omnipress? – No code needed—everything is block-based. – Responsive, SEO-optimized, accessibility-ready. – Works with any theme and supports modern WordPress features. Key Features ⚡ Full Site Editing (FSE) 📚 Pattern & Demo Libraries 🔧 50+ Custom Blocks (Free + Pro) 🛒 WooCommerce Support 🎯 Advanced Query Loop Builder 🧩 One-click Demo Import 🌐 Preloader & Page Transitions ✨ Glassmorphism & Scroll Triggers 🔍 Product Filters & Search 📈 SEO & Accessibility Friendly 🔄 Regular Updates & Fast Support Omnipress Blocks Core Blocks Column Container Google Maps Image Video Paragraph Creative Blocks Accordion Countdown Mega Menu Menu Item Slide Slider Tab Labels Tabs Tabs Content Icon Box Post Grid Counter Simple Blocks Button Dual Button Heading Icons Team Contact Form Custom CSS Tooltip Back To Top Breadcrumb Premium Blocks Advanced Query Loop Query Template Query Pagination (Next, Previous, Numbers) Query No Results Dynamic Field Query Content Switcher Testimonials Flip Box Image Comparison Lottie Animation Progress Bar Taxonomy Query WooCommerce Blocks Products Grid / List / Carousel Product Categories Grid / List / Carousel Advanced Product Search Related Products Product Filter 📦 View all block showcases License This plugin is licensed under the GPLv3. See LICENSE for full details.

View on WordPress.org