Read the docs

OptinlyHQ

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

OptinlyHQ records in CISA KEV

No OptinlyHQ vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gozen Forms 2 records LOW

Records

2 records in Gozen Forms · all components

TI-2025-06161 CVE-2025-6783 · GHSA-77f7-94f9-qhqq

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied par…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2025-07-04 No fix listed CWE-89
TI-2025-06160 CVE-2025-6782 · GHSA-m484-639j-m4rh

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supp…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2025-07-04 No fix listed CWE-89
Open these records in search →