CVE-2022-2123
WP Opt-in <= 1.4.1 - Arbitrary Settings Update via CSRF
The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.
CVSS 3.1 · 4.3 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products