Noptin < 1.6.5 - Open Redirect

Noptin 1.6.5 is susceptible to an open redirect vulnerability. The plugin does not validate the "to" parameter before redirecting the user to its given value, leading to an open redirect issue. id: CVE-2021-25033 info: name: Noptin 1.6.5 - Open Redirect author: dhiyaneshDk severity: medium...

WordPress plugin Noptin 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

WordPress Noptin plugin <= 3.8.7 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by kmaron1n in WordPress Plugin Noptin versions = 3.8.7...

WordPress plugin Noptin 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

WordPress Noptin Plugin <= 3.4.2 is vulnerable to Broken Access Control

Software Noptin Type Plugin Vulnerable versions = 3.4.2 Fixed in 3.4.3 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-37456 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 11706a81609d Credits Manab Jyoti Dowarah Required privilege...

CVE-2022-46803 WordPress Noptin Plugin <= 1.9.5 is vulnerable to CSV Injection

Improper Neutralization of Formula Elements in a CSV File vulnerability in Noptin Newsletter Simple Newsletter Plugin – Noptin.This issue affects Simple Newsletter Plugin – Noptin: from n/a through 1.9.5...

WordPress Noptin Plugin <= 1.9.5 is vulnerable to CSV Injection

Software Noptin Type Plugin Vulnerable versions = 1.9.5 Fixed in 1.10.0 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-46803 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID 08ef06d5753a Credits Mika Required privilege Unauthenticated Published 27...

WordPress Noptin plugin <= 1.6.4 - Open Redirect vulnerability

Open Redirect vulnerability discovered by Trang LKB in WordPress Noptin plugin versions = 1.6.4. Solution Update the WordPress Noptin plugin to the latest available version at least 1.6.5...

Noptin < 1.6.5 - Open Redirect

The plugin does not validate the to parameter before redirecting the user to its given value, leading to an open redirect issue https://example.com/?noptinns=emailclick&to=https://wpscan.com...