properfraction Vulnerabilities and Affected Products
Vulnerabilities associated with MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc..
Products
Clear product- Paid Membership Plugin, Ecommerce, User Registration Form, Login Form, User Profile & Restrict Content – ProfilePress20 vulnerabilities
- profilepress6 vulnerabilities
- MailOptin3 vulnerabilities
- kk Star Ratings – Rate Post & Collect User Feedbacks2 vulnerabilities
- CrawlWP SEO1 vulnerability
- CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor1 vulnerability
- MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.1 vulnerability
- Rate My Post – Star Rating Plugin by FeedbackWP1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-8628MEDIUM | Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin <= 1.2.70.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingThe Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'post-meta' shortcode in all versions up to, and including, 1.2.70.3 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesse… CWE-79Sep 24, 2024 | CVSS5.4v3.1 | EPSS0.263% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |