Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Danish Ali Malik Clear all filters
TI-2025-18787 CVE-2025-25118 · GHSA-9wx2-g8v2-jrwf

WordPress WPOptin plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Danish Ali Malik Top Bar – PopUps – by WPOptin wpoptin allows Reflected XSS.This issue affects Top Bar – PopUps – by W…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00299 Published 2025-03-03 No fix listed CWE-79
TI-2024-31924 CVE-2024-47645 · GHSA-9jhf-qw2w-cpxx

WordPress WPOptin plugin <= 2.0.1 - Local File Inclusion vulnerability

Priority LOW 35

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Danish Ali Malik Top Bar – PopUps – by WPOptin wpoptin allows PHP Local File Inclusion.This issue affects Top Bar – PopUps –…

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.00524 Published 2024-10-16 No fix listed CWE-22