
OceanWP · Security record
Is OceanWP safe?
No known vulnerability affects the current version (4.2.8). 7 issues were found in earlier versions and fixed, the latest disclosed on Aug 15, 2025.
Checked 3 days ago against the WPVulnerability database, for version 4.2.8.
How it’s looked after
- Last release
- Oct 26, 2026 (1 week ago)
- Releases in the last year
- 12
- Active installs
- 400K+
7 known vulnerabilities
- 2 high
- 4 medium
- 1 not rated
None affects the current version.
Disclosed each year
- 20231
- 20241
- 20255
Every known vulnerability in OceanWP
Newest first, with any that affect the current version at the top.
Fixed in 4.2.8 · CVE-2026-115592 · Aug 15, 2025 · Wordfence
Fixed in 4.1.2 · CVE-2025-8944 · Aug 15, 2025 · Wordfence
Fixed in 4.1.2 · CVE-2025-8891 · Aug 12, 2025 · Wordfence
Fixed in 3.6.1 · CVE-2024-5647 · Jul 2, 2025 · Wordfence
Fixed in 4.1.0 · CVE-2025-5524 · Jun 18, 2025 · Wordfence
Fixed in 3.5.5 · CVE-2024-2476 · Mar 28, 2024 · Wordfence
Fixed in 3.4.2 · CVE-2023-23700 · Feb 27, 2023 · Wordfence
Questions about OceanWP’s security
Is OceanWP safe to use?
No known vulnerability affects its current version. Earlier versions had issues that are now fixed, so keep OceanWP updated: most attacks target sites that haven’t updated.
Does OceanWP have known security vulnerabilities?
None that affect the current version. WPVulnerability’s database lists 7 older issues, fixed in earlier versions, so keep OceanWP up to date.
Is OceanWP still maintained?
Yes. Its last release was 1 week ago.
Hear about the next one first
Track your theme on TrackWP and get an alert when a new vulnerability affecting it is published. Every plan has it, the free Starter too; Boost and FullCharge email it at once.
Start freeVulnerability data from WPVulnerability (CC0), which gathers records from CVE, Wordfence, Patchstack and WPScan. A clean record isn’t a guarantee: keep every theme updated.