Search vulnerabilities

Results 1

Export CSV
CVE-2022-2123

WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF

The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Products