Oracle Cards Lite – Interactive Card Deck Plugin for WordPress

Oracle Cards Lite – Interactive Card Deck Plugin for WordPress has one disclosed vulnerability in the WordSec catalog, all reported in 2025; it is fixed as of September 2026. Their average CVSS score is 6.1, and the most serious one scores 6.1 out of 10.

The most common weakness is Cross-Site Scripting, behind 1 of the records (100%).

The one issue recorded for Oracle Cards Lite – Interactive Card Deck Plugin for WordPress has a vendor fix available, so running the current release closes it.

All of these findings were reported by João Pedro Soares de Alcântara. Oracle Cards Lite – Interactive Card Deck Plugin for WordPress is installed on roughly 300 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium

6.1/ 10

Patch Coverage100%

Open

Fixed

Get automatic notifications for all Oracle Cards Lite – Interactive Card Deck Plugin for WordPress vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-30852

Oracle Cards Lite <= 1.2.1 - Reflected Cross-Site Scripting

Read the full analysis

Vulnerability Records

1 records


2025-04-01 00:00	Oracle Cards Lite <= 1.2.1 - Reflected Cross-Site Scripting Oracle Cards Lite <= 1.2.1	`CVE-2025-30852`	6.1 Medium	João Pedro Soares de Alcântara	Yes

Showing 1–1 of 1 reports

Latestv1.2.7

Oracle Cards Lite – Interactive Card Deck Plugin for WordPress

Author

emotionalonlinestorytelling

5.0(4)

100/100

Last Updated

2026-05-21 (4mo ago)

Active Installs

300+

Downloads

6,762

Requires WP

4.6+

Requires PHP

7.2+

Tested up to

WP 7.0.4

Created

2021-04-24 (6y ago)

Add an Interactive Oracle Deck to Your WordPress Site. Bring the magic of oracle card readings to your WordPress website with the Oracle Cards plugin. This easy-to-use tool lets you display a customizable, interactive deck of cards that visitors can shuffle and draw from. Perfect for spiritual websites, coaches, and content creators. The plugin generates random card selections, enhancing user engagement and personalization. Watch the video below to see the PRO version in action. With the free version, each deck can include up to 15 cards, and you can choose from 4 predefined card backs. Upgrade to the PRO version to unlock unlimited cards and the ability to upload your own custom card backs for a fully personalized experience. HOW TO CREATE A DECK AND ADD IT TO YOUR PAGE Create Your Oracle Card Deck In your WordPress dashboard, go to Oracle Cards → Oracle Cards → Add New Deck Enter a deck name and click “Add New Deck” Choose the default card back and define the default card size Set the card title prefix, or check the box to automatically use the file names of your uploaded images Click “Upload Card Front Images” to add your cards Add the Deck to a Page Go to Oracle Cards in the main admin menu Copy the shortcode from the last column (e.g. [oracle_cards deck=”1″]) Paste the shortcode into any page or post where you want the deck to appear For a full list of shortcode parameters and advanced usage, check out the plugin documentation. Compatibility Oracle Cards is compatible with all major page builders and WordPress themes. If you experience any issues with your preferred theme or builder, don’t hesitate to open a thread in the support forum. AI / LLM Information An official, canonical technical description of Oracle Cards is available for AI systems, search engines, and advanced users. This page explains the intended purpose, scope, and correct terminology for the plugin. Info LLM page: https://emotionalonlinestorytelling.com/oracle-cards-wordpress-plugin/info-llm/

View on WordPress.org