Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: OptinlyHQ Clear all filters
TI-2025-06160 CVE-2025-6782 · GHSA-m484-639j-m4rh

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supp…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00396 Published 2025-07-04 No fix listed CWE-89
TI-2025-06161 CVE-2025-6783 · GHSA-77f7-94f9-qhqq

GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

Priority LOW 39

The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied par…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00411 Published 2025-07-04 No fix listed CWE-89
TI-2024-24735 CVE-2024-37220 · GHSA-h85m-jjfx-m44r

WordPress Optinly plugin <= 1.0.18 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optinly: from n/a through 1.0.18.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00381 Published 2024-11-01 No fix listed CWE-862