Skip to content
Noroxi

OptinMonster records

5 published records for vendor OptinMonster.

Filter by product ↓

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 19
  2. 21
  3. 23
  4. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2021-39341
    39Monitor

    OptinMonster <= 2.6.4 Unprotected REST-API Endpoints

    HighCVSS 8.2Proof of conceptEPSS 21%

    optinmonster · optinmonsterNov 1, 2021

  • CVE-2023-0772
    26Monitor

    Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosure

    MediumCVSS 6.5No exploitEPSS 0%

    optinmonster · optinmonsterMar 13, 2023

  • CVE-2021-39325
    24Monitor

    OptinMonster <= 2.6.0 Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 0%

    optinmonster · optinmonsterSep 20, 2021

  • CVE-2016-10996
    21Monitor

    The optinmonster plugin before 1.1.4.6 for WordPress has incorrect access control for shortcodes because of a nonce leak.

    MediumCVSS 5.3No exploitEPSS 1%

    optinmonster · optinmonsterSep 20, 2019

  • CVE-2024-4045
    21Monitor

    Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation <= 2.16.1 - Authenticated (Contributor+) Stored Cross-Site Sc

    MediumCVSS 5.4No exploitEPSS 0%

    optinmonster · optinmonsterMay 25, 2024