Vulnerabilities

TI-2026-12668 CVE-2026-15052 · GHSA-4qrg-84mv-738w

Cross-site scripting in umarbajwa MailChimp Subscribe Form, Optin Builder, PopUp Builder…

LOW 38

The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all versions up to, and including, 4.3.3 due to insuffic…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00419 Published 2026-08-01 No fix listed CWE-79

TI-2026-10654 CVE-2026-12409 · GHSA-fx4r-pqvc-gggc

Landing Page Builder <= 1.5.3.6 - Cross-Site Request Forgery to ulpb_admin_data AJAX Action

LOW 19

The Landing Page Builder – Coming Soon page, Maintenance Mode, Lead Page, WordPress Landing Pages plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.5.3.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00192 Published 2026-07-16 No fix listed CWE-352

TI-2025-09080 CVE-2025-9895 · GHSA-pprh-g3fj-p7wh

Notification Bar <= 2.2 - Cross-Site Request Forgery

LOW 19

The Notification Bar plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00133 Published 2025-10-03 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting in umarbajwa MailChimp Subscribe Form, Optin Builder, PopUp Builder…

Landing Page Builder <= 1.5.3.6 - Cross-Site Request Forgery to ulpb_admin_data AJAX Action

Notification Bar <= 2.2 - Cross-Site Request Forgery