WordPress: Unauthenticated Shortcode Execution When WooCommerce is Active in Ocean Extra Plugin

In Ocean Extra plugin for WordPress versions up to and including 2.4.6 a medium severity vulnerability CVE-2025-3472 was detected. This vulnerability allows unauthenticated attackers to execute arbitrary shortcodes due to improper validation before calling do_shortcode, when WooCommerce is also installed and active. To address this issue, users should upgrade Ocean Extra plugin to versions 2.4.7 or later. For more details, visit https://nvd.nist.gov/vuln/detail/CVE-2025-3472.