Lucene search
+L

228 matches found

OSV
OSV
•added 2023/06/26 11:15 a.m.•12 views

CVE-2023-29434

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
NVD
NVD
•added 2023/06/26 11:15 a.m.•23 views

CVE-2023-29434

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
•added 2023/06/26 11:15 a.m.•24 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

4.3CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/06/26 10:08 a.m.•66 views

CVE-2023-29434

CVE-2023-29434 affects FancyThemes Optin Forms – Simple List Building Plugin for WordPress (

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/06/26 10:08 a.m.•33 views

CVE-2023-29434 WordPress Optin Forms Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/06/26 12:00 a.m.•11 views

WordPress Plugin FancyThemes Optin Forms–Simple List Building 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/06/26 12:00 a.m.•12 views

PT-2023-22258 · WordPress · Fancythemes Optin Forms

Name of the Vulnerable Software and Affected Versions: FancyThemes Optin Forms – Simple List Building Plugin for WordPress versions prior to 1.3.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Thi...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/26 12:00 a.m.•4 views

CVE-2023-29434: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/05/28 12:00 a.m.•17 views

WordPress plugin MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder 4.0.9.1及 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.3AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2023/04/06 12:00 a.m.•15 views

WordPress Optin Forms Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Optin Forms Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29434 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ed92b069f26e Credits Rio Darmawan Required...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References2Affected Software1
OSV
OSV
•added 2022/09/23 7:15 p.m.•17 views

CVE-2022-36340

Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin = 1.2.49.0 at WordPress...

5.3CVSS5.8AI score0.00781EPSS
SaveExploits0References2
Prion
Prion
•added 2022/09/23 7:15 p.m.•24 views

Arbitrary file deletion

Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin = 1.2.49.0 at WordPress...

5CVSS5.3AI score0.00781EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/09/23 6:31 p.m.•91 views

CVE-2022-36340

CVE-2022-36340 concerns the WordPress MailOptin plugin (versions

6.5CVSS5.4AI score0.00781EPSS
SaveExploits0References2Affected Software1
Patchstack
Patchstack
•added 2022/01/16 12:00 a.m.•19 views

WordPress WP Optin Wheel plugin <= 1.3.4 - Subscribe+ Plugin Options Update (Toggle Wheel status, Update wheels) vulnerability

Subscribe+ Plugin Options Update Toggle Wheel status, Update wheels vulnerability discovered in WordPress WP Optin Wheel plugin versions = 1.3.4. Solution Update the WordPress WP Optin Wheel plugin to the latest available version at least 1.3.5...

2.1AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2022/01/16 12:00 a.m.•20 views

WordPress WP Optin Wheel plugin <= 1.3.4 - Information Disclosure vulnerability (Mailchimp lists, logs)

Information Disclosure vulnerability Mailchimp lists, logs discovered in WordPress WP Optin Wheel plugin versions = 1.3.4. Solution Update the WordPress WP Optin Wheel plugin to the latest available version at least 1.3.5...

2AI score
SaveExploits0References1Affected Software1
Patchstack
Patchstack
•added 2022/01/16 12:00 a.m.•16 views

WordPress WP Optin Wheel plugin <= 1.3.4 - Subscriber+ Arbitrary Delete Wheels or Posts vulnerability

Subscriber+ Arbitrary Delete Wheels or Posts vulnerability discovered in WordPress WP Optin Wheel plugin versions = 1.3.4. Solution Update the WordPress WP Optin Wheel plugin to the latest available version at least 1.3.5...

2.2AI score
SaveExploits0References1Affected Software1
CNVD
CNVD
•added 2019/11/21 12:00 a.m.•21 views

WordPress plugmatter-optin-feature-box-lite plugin SQL injection vulnerability (CNVD-2019-41888)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. plugmatter-optin-feature-box-lite is a feature list plugin used in it. The WordPress plugmatter-optin-feature-box-lite plugin...

9.8CVSS8AI score0.0237EPSS
SaveExploits1References1
CNVD
CNVD
•added 2019/11/20 12:00 a.m.•19 views

WordPress plugmatter-optin-feature-box-lite plugin SQL injection vulnerability (CNVD-2019-42838)

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. plugmatter-optin-feature-box-lite is a feature list plugin used in it. A SQL injection vulnerability exists in the WordPress...

9.8CVSS8.1AI score0.02183EPSS
SaveExploits0References1
Prion
Prion
•added 2019/10/07 3:15 p.m.•28 views

Sql injection

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbmailchimp pmfbtid parameter...

7.5CVSS8.4AI score0.0237EPSS
SaveExploits1References3Affected Software1
Prion
Prion
•added 2019/10/07 3:15 p.m.•23 views

Sql injection

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfbcc pmfbtid parameter...

7.5CVSS8.4AI score0.02183EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder