Vulnerabilities

TI-2024-08004 CVE-2024-8628 · GHSA-6hq6-qvm8-gxm2

Cross-site scripting in properfraction MailOptin – Popup, Optin Forms & Email Newsletters…

LOW 24

The Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'post-meta' shortcode in all versions up to, and inc…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00279 Published 2024-09-24 No fix listed CWE-79

TI-2023-09767 CVE-2023-23980 · GHSA-9xm3-gm92-xwvf

WordPress MailOptin Plugin <= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MailOptin Popup Builder Team MailOptin plugin <= 1.2.54.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-04-06 No fix listed CWE-79

TI-2022-16683 CVE-2022-36340 · GHSA-8jh8-j7rp-79hx

WordPress MailOptin plugin <= 1.2.49.0 - Unauthenticated Optin Campaign Cache Deletion vulnerability

LOW 36

Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00781 Published 2022-09-23 No fix listed CWE-862

Vulnerabilities

Filters

Cross-site scripting in properfraction MailOptin – Popup, Optin Forms & Email Newsletters…

WordPress MailOptin Plugin <= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS)

WordPress MailOptin plugin <= 1.2.49.0 - Unauthenticated Optin Campaign Cache Deletion vulnerability