Critical Security Update For Oxygen Builder

A security flaw is found in Oxygen Builder latest version
A security flaw is found in Oxygen Builder latest version

On Wednesday, January 15th, a security vulnerability in Oxygen’s code was disclosed to us privately by Sam Thomas at Pentest Ltd.

The developers at Oxygen started investing the disclosed vulnerability and while creating a security patch update, they encountered an additional related vulnerability that was not initially reported to us.

Until date, these vulnerabilities have not been exploited in the wild and therefore, Oxygen users would have some time to update Oxygen Builder to the latest version.

Oxygen 3.1.1 is a security patch specifically for these vulnerabilities and contains no other changes. We are not releasing a changelog or any more details until Oxygen users have had sufficient opportunity to update their sites.

We recommend all Oxygen users to update your Oxygen sites to version 3.1.1 immediately. Here's how you can do that easily:

Automatically Update Oxygen Builder Plugin


Check The License Keys

Go to Oxygen » Settings » License and make sure your license key is entered. Once your key is entered (and even if it was already present), click “Submit” and ensure you see the “valid” response next to the input box. This is an important step to ensure that you are able to update to the latest Oxygen Builder plugin.


Get The Latest Version

Head over to Dashboard » Updates in the WordPress admin panel and, if the Oxygen update isn’t already visible in the plugin update section, click “Check Again” until the update appears. By default, you don't have to request a check again as it is automated.


Updating Oxygen Builder

Once you are prompted with the upgrade, tick the box next to Oxygen in the plugin update section and click “Update Plugins”.



Here's the last step. Head over to the Plugins page in the WordPress admin panel and verify that Oxygen’s version number is 3.1.1.

Manually Update Oxygen Builder Plugin


Login To Oxygen Backend

Go to Oxygen Builder backend and click “Download Oxygen”.


Download Latest Oxygen Builder

In the list of purchases, find your Oxygen purchase and click “View Details and Downloads”.


Download The Relevant Files

Under the “Products” heading, find the download link for Oxygen 3.1.1 and download the zip file (if you use Safari, please switch to Chrome or Firefox to download the file to avoid the file being unzipped automatically).


Login to WP Admin

Log into your WordPress site and go to the Plugins page in the WordPress admin panel.


Disable Old Oxygen Builder

Find Oxygen and click “Deactivate”, then “Delete”.


Install The Latest Oxygen Builder

At the top of the Plugins page, click “Add New”, and then “Upload Plugin”.


Upload Oxygen Builder

Click “Choose File” and select the Oxygen 3.1.1 zip file you just downloaded.


Activate Oxygen Builder

Once the plugin is finished installing, make sure to activate it.

Clear WordPress Cache After Installation

Lastly, remember to clear your WordPress cache to ensure that all old files are removed and a new cache is generated for your site. Read this guide on how to clear WordPress cache if you need any assistance.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.