Open Graphite
Open Graphite has one disclosed vulnerability in the WordSec catalog, all reported in 2023; it is fixed as of October 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.
The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).
The one issue recorded for Open Graphite has a vendor fix available, so running the current release closes it.
All of these findings were reported by minhtuanact. Open Graphite is installed on roughly 3,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.3.
CVE-2022-47439Open Graphite <= 1.6.0 - Reflected Cross-Site Scripting via topic parameter
Read the full analysisVulnerability Records

Open Graphite
Author
Rocket Apps
Open Graphite gives you control over how your WordPress content appears when shared on social media. When someone shares one of your pages on platforms like Facebook, the platform automatically selects text and images from the page to generate a preview. The results are often less than ideal, with irrelevant images, poorly formatted text and descriptions that are cut off mid-sentence. This can make your content less appealing and reduce engagement. Open Graphite solves this by letting you customise the image, title, description and object type displayed when any of your pages are shared on social media. You can create compelling, purpose-built previews without changing or compromising your original page content. Features Set the homepage title, description, image and object type Customise the Open Graph title, description, image and object type of any post, page or custom post type Automatically ask Facebook to refresh its cache when you publish or update content (requires a Facebook App ID and App Secret) X (Twitter) username and card type Pinterest options (allow, disable rich pins, or deny saving) Enhanced Slack sharing (author name and reading time) Avoid Open Graph conflicts with Yoast SEO and Jetpack Optional image alt, updated time, article dates, author URL and locale tags Choose which post types and user roles can use the Open Graphite metabox Enable excerpts for pages Homepage previews for Facebook, LinkedIn and X Dynamic testing links to the Facebook Debugger, LinkedIn Post Inspector and other testing tools Open Graphite Pro Open Graphite Pro adds: Automatic defaults for titles, descriptions, featured images and object types, plus character limits Social previews for individual posts and pages Automatic cropped 1200 x 630 Facebook-ready image size, with an “Open Graph Sizes” tab in the Media Library WooCommerce product and product category support Open Graph quality indicators admin column Priority support How to use For the homepage… Go to Settings > Open Graphite Set your homepage image, title, description and object type Choose which post types to enable Save your settings For posts and pages… Create a new post or page (or edit an existing one) Scroll down to the Open Graphite metabox Enter your desired title, description, image and object type External services This plugin can connect to the Facebook Graph API to ask Facebook to refresh its cached copy of your page, so shared links show your latest title, description and image. This only happens when you have entered a Facebook App ID and App Secret in Settings > Open Graphite > Facebook, and only when a published post is saved. The URL of the post and an app access token made from your App ID and App Secret are sent to https://graph.facebook.com/. This service is provided by Meta Platforms, Inc.: Terms of Service, Privacy Policy, Platform Terms.
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C