Lucene search
+L

191 matches found

CVE
CVE
added 2023/11/14 8:55 p.m.110 views

CVE-2023-47545

CVE-2023-47545 affects Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin for WordPress, versions = 2.5.5 recommended.

5.9CVSS5.4AI score0.00382EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/14 8:55 p.m.12 views

CVE-2023-47545 WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.4 is vulnerable to Cross Site Scripting (XSS)

Auth. editor+ Stored Cross-Site Scripting XSS vulnerability in Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your MailChimp List plugin = 2.5.4 versions...

5.9CVSS5.6AI score0.00382EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/14 12:00 a.m.28 views

WordPress Plugin Forms for Mailchimp by Optin Cat - Grow Your MailChimp List Security Breach

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. WordPress Plugin Forms for Mailchimp by Optin Cat - Grow...

5.9CVSS6.6AI score0.00382EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/11/07 12:00 a.m.21 views

WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Forms for Mailchimp by Optin Cat Type Plugin Vulnerable versions = 2.5.4 Fixed in 2.5.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-47545 Patch priority Medium CVSS severity Medium 5.9 Developer Claim ownership PSID 6854d5e5d188 Credits DoYeon Park...

5.9CVSS6.6AI score0.00382EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2023/10/31 2:15 p.m.12 views

CVE-2023-5098

The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges like subscribers from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS...

8.1CVSS7.2AI score0.0058EPSS
SaveExploits2References1
Prion
Prion
added 2023/10/31 2:15 p.m.20 views

Design/Logic Flaw

The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges like subscribers from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS...

5.5CVSS7.9AI score0.0058EPSS
SaveExploits2References1Affected Software1
CVE
CVE
added 2023/10/31 1:54 p.m.63 views

CVE-2023-5098

CVE-2023-5098: Campaign Monitor Forms by Optin Cat for WordPress (pre-2.5.6) allows a Subscriber+ level attacker to overwrite arbitrary WordPress options by calling an AJAX action (fca_eoi_dismiss) with the value true, enabling a denial-of-service style attack. Root cause is broken access control...

8.1CVSS8AI score0.0058EPSS
SaveExploits2References1Affected Software1
CNNVD
CNNVD
added 2023/10/31 12:00 a.m.11 views

WordPress Plugin Campaign Monitor Forms by Optin Cat Access Control Error Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

8.1CVSS6.6AI score0.0058EPSS
SaveExploits2References2
CNNVD
CNNVD
added 2023/09/27 12:00 a.m.9 views

WordPress plugin Landing Page Builder - Lead Page - Optin Page - Squeeze Page - WordPress Landing Pages Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed using the PHP language, which supports personal blogs on PHP and MySQL servers.WordPress plugin is an...

5.9CVSS5.8AI score0.00392EPSS
SaveExploits0References2
NVD
NVD
added 2023/06/26 11:15 a.m.18 views

CVE-2023-29434

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

5.9CVSS5.5AI score0.00369EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/26 11:15 a.m.9 views

CVE-2023-29434

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

4.8CVSS7.3AI score0.00369EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/26 11:15 a.m.22 views

Cross site scripting

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

4.3CVSS4.9AI score0.00369EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/06/26 10:08 a.m.28 views

CVE-2023-29434 WordPress Optin Forms Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in FancyThemes Optin Forms – Simple List Building Plugin for WordPress plugin = 1.3.1 versions...

5.9CVSS5.6AI score0.00369EPSS
SaveExploits0References1
CVE
CVE
added 2023/06/26 10:08 a.m.59 views

CVE-2023-29434

CVE-2023-29434 affects FancyThemes Optin Forms – Simple List Building Plugin for WordPress (

5.9CVSS5AI score0.00369EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/06/26 12:00 a.m.9 views

PT-2023-22258 · WordPress · Fancythemes Optin Forms

Name of the Vulnerable Software and Affected Versions: FancyThemes Optin Forms – Simple List Building Plugin for WordPress versions prior to 1.3.1 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Thi...

5.9CVSS5.4AI score0.00369EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/06/26 12:00 a.m.8 views

WordPress Plugin FancyThemes Optin Forms–Simple List Building 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

5.9CVSS6.4AI score0.00369EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/05/28 12:00 a.m.10 views

WordPress plugin MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder 4.0.9.1及 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

5.9CVSS6.3AI score0.00369EPSS
SaveExploits0References2
Patchstack
Patchstack
added 2023/04/06 12:00 a.m.13 views

WordPress Optin Forms Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)

Software Optin Forms Type Plugin Vulnerable versions = 1.3.2 Fixed in 1.3.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-29434 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID ed92b069f26e Credits Rio Darmawan Required...

5.9CVSS6AI score0.00369EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/09/23 7:15 p.m.11 views

CVE-2022-36340

Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin = 1.2.49.0 at WordPress...

5.3CVSS5.8AI score0.00699EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/23 7:15 p.m.20 views

Arbitrary file deletion

Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin = 1.2.49.0 at WordPress...

5CVSS5.3AI score0.00699EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder