Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: picocodes Clear all filters
TI-2026-86178 CVE-2026-119616 · GHSA-cj64-8m9g-g246

Local file inclusion in Noptin newsletter plugin for WordPress

Priority LOW 27

The Noptin – Newsletter, New Post Notifications & Email Automation plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.4.3 via the 'noptin_fields[first_name]' parameter para…

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00411 Published 2026-11-07 No fix listed CWE-98
TI-2026-70236 CVE-2026-103482 · GHSA-fgpr-5vg8-8pv9

Stored cross-site scripting in Noptin newsletter plugin for WordPress

Priority LOW 24

The Simple Newsletter Plugin – Noptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'noptin_fields[<custom_field_merge_tag>] (e.g.

CVSS 3.1MEDIUM 5.4 Network No auth No interaction EPSS 0.00313 Published 2026-10-10 No fix listed CWE-79