Read the docs

picocodes

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

picocodes records in CISA KEV

No picocodes vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-86178 CVE-2026-119616 · GHSA-cj64-8m9g-g246

Local file inclusion in Noptin newsletter plugin for WordPress

Priority LOW 27

The Noptin – Newsletter, New Post Notifications & Email Automation plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.4.3 via the 'noptin_fields[first_name]' parameter para…

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00411 Published 2026-11-07 No fix listed CWE-98
TI-2026-70236 CVE-2026-103482 · GHSA-fgpr-5vg8-8pv9

Stored cross-site scripting in Noptin newsletter plugin for WordPress

Priority LOW 24

The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_tag>] (e.g.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00313 Published 2026-10-10 No fix listed CWE-79
Open these records in search →