All products
mailoptin
WordPress · Plugin8 reports| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|
| MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' ParameterCVE-2026-109515 |
mailoptin |
WordPress |
Critical
|
Fix reported |
|
| MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. <= 1.2.78.0 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2026-66703 |
mailoptin |
WordPress |
Medium
|
Fix reported |
|
| MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. <= 1.2.77.3 - Unauthenticated Privilege EscalationCVE-2026-57813 |
mailoptin |
WordPress |
Critical
|
Fix reported |
|
| MailOptin <= 1.2.75.0 - Authenticated (Administrator+) Stored Cross-Site ScriptingCVE-2025-58596 |
mailoptin |
WordPress |
Medium
|
Fix reported |
|
| Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.70.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingCVE-2024-8628 |
mailoptin |
WordPress |
Medium
|
Fix reported |
|
| Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.35.1 - Authorization Bypass |
mailoptin |
WordPress |
High
|
Fix reported |
|
| MailOptin <= 1.2.54.0 - Authenticated (Admin+) Cross Site ScriptingCVE-2023-23980 |
mailoptin |
WordPress |
Medium
|
Fix reported |
|
| MailOptin <= 1.2.49.0 - Missing Authorization to Cache DeletionCVE-2022-36340 |
mailoptin |
WordPress |
Medium
|
Fix reported |
|
