Read the docs

OptinlyHQ

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

OptinlyHQ records in CISA KEV

No OptinlyHQ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gozen Forms 2 records LOW

Records

4 records

TI-2025-06161 CVE-2025-6783 · GHSA-77f7-94f9-qhqq

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied par…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2025-07-04 No fix listed CWE-89
TI-2025-06160 CVE-2025-6782 · GHSA-m484-639j-m4rh

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supp…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2025-07-04 No fix listed CWE-89
TI-2024-24735 CVE-2024-37220 · GHSA-h85m-jjfx-m44r

WordPress Optinly plugin <= 1.0.18 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optinly: from n/a through 1.0.18.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2024-11-01 No fix listed CWE-862
Open these records in search →