CVE-2026-109515

The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribetoemaillist endpoint accepting an attacker-supplied...

CVE-2026-109515

The MailOptin plugin for WordPress (versions up to and including 1.2.78.6 ) is vulnerable to unauthenticated privilege escalation . The root cause is a lack of allow-list validation on the optin_data[form_custom_field_mappings] parameter within the subscribe_to_email_list endpoint. An attacker ca...

CVE-2026-109515 MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter

The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribetoemaillist endpoint accepting an attacker-supplied...

EUVD-2026-102644

The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribetoemaillist endpoint accepting an attacker-supplied...

CVE-2026-109515: Improper Privilege Management

The MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.2.78.6 This is due to the subscribetoemaillist endpoint accepting an attacker-supplied...

PT-2026-115432

Name of the Vulnerable Software and Affected Versions MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. versions prior to 1.2.78.7 Description An unauthenticated privilege escalation issue exists because the subscribe to email list endpoint accepts an...

WordPress MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. plugin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter vulnerability

Unauthenticated Privilege Escalation to 'formcustomfieldmappings' Parameter vulnerability discovered by Kuba in WordPress Plugin MailOptin versions = 1.2.78.6...

CVE-2026-66703

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

CVE-2026-66703

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

CVE-2026-66703

CVE-2026-66703 describes a Contributor Cross Site Scripting (XSS) vulnerability in the WordPress MailOptin plugin versions

EUVD-2026-53907

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

CVE-2026-66703 WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

PT-2026-68597

Name of the Vulnerable Software and Affected Versions MailOptin versions prior to 1.2.79.0 Description Cross Site Scripting XSS allows an attacker with contributor privileges to execute malicious scripts in the browser of other users. XSS is a security flaw where an application includes untrusted...

CVE-2026-66703: Improper Neutralization of Input During Web Page Generation

Contributor Cross Site Scripting XSS in MailOptin = 1.2.78.0 versions...

WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerability

Cross Site Scripting XSS vulnerability discovered by Ananda Dhakal Patchstack in WordPress Plugin MailOptin versions = 1.2.78.0...

CVE-2026-57813

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through = 1.2.77.3...

CVE-2026-57813 WordPress MailOptin plugin <= 1.2.77.3 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through = 1.2.77.3...

CVE-2026-57813

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through = 1.2.77.3...

CVE-2026-57813 WordPress MailOptin plugin <= 1.2.77.3 - Privilege Escalation vulnerability

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through = 1.2.77.3...

CVE-2026-57813

The WordPress MailOptin plugin is affected by an Incorrect Privilege Assignment vulnerability in versions ≤ 1.2.77.3 . This flaw allows for Privilege Escalation , potentially enabling an attacker to gain elevated permissions within the application. While the specific root cause or technical compo...