Description
Unauthenticated Optin Campaign Cache Deletion vulnerability in MailOptin plugin <= 1.2.49.0 at WordPress.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_confirm
https://patchstack.com/database/vulnerability/mailoptin/wordpress-mailoptin-plugin-1-2-49-0-unauthenticated-optin-campaign-cache-deletion-vulnerability/_s_id=cve
Product x_refsource_confirm
https://plugins.svn.wordpress.org/mailoptin/trunk/changelog.txt
Scores
CVSS v3
6.5
EPSS
0.0065
EPSS Percentile
46.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
yes
Technical Impact
partial
Details
CWE
CWE-862
Status
published
Products (2)
mailoptin/mailoptin
< 1.2.49.0
MailOptin Popup Builder Team/MailOptin (WordPress plugin)
<= 1.2.49.0 - 1.2.49.0
Published
Sep 23, 2022
Tracked Since
Feb 18, 2026