Optin Forms Vulnerabilities

The Optin Forms – Simple List Building Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-...

CVSS:

4.4

Affected:

up to 1.3.6

Fixed in:

1.3.7

Disclosed:

Dec 6, 2023

CVE-2023-49841 on NVD →

The Optin Forms plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access and above, to inject arbitrary web...

CVSS:

4.4

Affected:

up to 1.3.2

Fixed in:

1.3.3

Disclosed:

Apr 6, 2023

CVE-2023-29434 on NVD →