Open Graphite
Open Graphite has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Open Graphite has a vendor fix available, so running the current release closes it.
All of these findings were reported by minhtuanact. Open Graphite is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 6.8.8.
CVE-2022-47439Open Graphite <= 1.6.0 - Reflected Cross-Site Scripting via topic parameter
Read the full analysisVulnerability Records

Open Graphite
Author
Rocket Apps
Open Graphite lets you control how your WordPress content is viewed when shared on social media. Typically when one of your pages is shared on social media (Facebook for example), the platform will use the first image and text it can find on the page. This is usually not ideal and often truncates the content into something nonsensical, resulting in the page being less likely to be engaged with. Open Graphite solves this problem, by allowing you to customise the image, title and description of any of your pages that are shared on social media, all without compromising the original content. How to use For the homepage… Go to Open Graphite (admin side menu) Set your homepage title, description, image and object type Enter a Facebook app ID (optional) Enter a Twitter username (optional) Choose a Twitter card type Select which post types to enable for For posts and pages… Create a new post or page (or edit an existing one) Scroll down to the Open Graphite metabox Enter your desired title, description, image and object type Premium Support While the free version of Open Graphite is supported in the WordPress support page, one-on-one priority support is given to Open Graphite Pro license holders. Open Graphite Pro has additional features, such as: The ability to use with any custom post type Force Facebook to automatically and immediately update your title, description or featured image when you make edits Mobile and desktop previews for Facebook, Twitter and Linkedin WooCommerce product support Pinterest specific options Enhanced Slack sharing Enable automatic defaults for titles, descriptions, featured images and object types Open Graph content indicators Limit the number of characters for titles and descriptions (prevent your titles and descriptions getting truncated) Open graph check tool Additional open graph options Priority support
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C