Read the docs

Noptin

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Noptin records in CISA KEV

No Noptin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Noptin 2 records MEDIUM

Records

2 records

TI-2022-23149 CVE-2022-46803 · GHSA-q9rq-5hwp-7wq9

WordPress Noptin Plugin <= 1.9.5 is vulnerable to CSV Injection

Priority MEDIUM 50

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00702 Published 2023-11-07 No fix listed CWE-1236
TI-2021-07311 CVE-2021-25033 · GHSA-gxrq-7hvq-53q3

Noptin < 1.6.5 - Open Redirect

Priority LOW 32

The WordPress Newsletter Plugin WordPress plugin before 1.6.5 does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.02303 Published 2022-02-14 Fixed in 1.6.5 CWE-601
Open these records in search →