properfraction Vulnerabilities and Affected Products
Vulnerabilities associated with MailOptin.
Products
Clear product- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress20 vulnerabilities
- profilepress6 vulnerabilities
- MailOptin3 vulnerabilities
- kk Star Ratings – Rate Post & Collect User Feedbacks2 vulnerabilities
- CrawlWP SEO1 vulnerability
- CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor1 vulnerability
- MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.1 vulnerability
- Rate My Post – Star Rating Plugin by FeedbackWP1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-66703MEDIUM | WordPress MailOptin plugin <= 1.2.78.0 - Cross Site Scripting (XSS) vulnerabilityContributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions. CWE-79Aug 6, 2026 | CVSS6.5v3.1 | EPSS0.139% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-57813CRITICAL | WordPress MailOptin plugin <= 1.2.77.3 - Privilege Escalation vulnerabilityIncorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <= 1.2.77.3. CWE-266Jul 13, 2026 | CVSS9.8v3.1 | EPSS0.261% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2025-58596MEDIUM | WordPress MailOptin Plugin <= 1.2.75.0 - Cross Site Scripting (XSS) VulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in properfraction MailOptin mailoptin allows Stored XSS.This issue affects MailOptin: from n/a through <= 1.2.75.0. CWE-79Sep 3, 2025 | CVSS5.9v3.1 | EPSS0.225% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |