PT-2025-52413 · WordPress · Ocean Modal Window

Alex Tselevich · CVE-2025-13307 · Published 2025-12-19 · Updated 2025-12-24

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ocean Modal Window WordPress plugin versions prior to 2.3.3

Description The Ocean Modal Window WordPress plugin is affected by a Remote Code Execution issue. The issue is related to the modal display logic, where user-controlled conditions set by Editors and Administrators (with edit pages capability) are executed as part of an eval statement on every site page. This can lead to remote code execution.

Recommendations Update the Ocean Modal Window WordPress plugin to version 2.3.3 or later.

Exploit

Fix

Related Identifiers

CVE-2025-13307

Affected Products

Ocean Modal Window

References · 7

• 🔥 https://wpscan.com/vulnerability/710de342-6fb9-47bd-a40b-7b74fc3c181b · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-13307 · Security Note
• https://t.me/CVEtracker/40240 · Telegram Post
• https://twitter.com/CVEnew/status/2002099190298784251 · Twitter Post
• https://twitter.com/cracbot/status/2003782759865885118 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2002018028897075260 · Twitter Post
• https://t.me/cveNotify/146294 · Telegram Post