Authorization

The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the loggedinorhasapikey function in the /OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on sites with...

PT-2021-22533

Name of the Vulnerable Software and Affected Versions: OptinMonster WordPress plugin versions up to and including 2.6.0 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input validation in the load previews function found in the /OMAPI/Output.php file. This...