Skip to content
OpenAdvisories

Vendor

OptinMonster

2 known vulnerabilities.

Products

OptinMonster 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2021-39341 Scanner template EPSS 22%

    OptinMonster <= 2.6.4 Unprotected REST-API Endpoints

    The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the logged_in_or_has_api_key function in the ~/OMAPI/RestApi.php file that can used to exploi…

    OptinMonster OptinMonster Web / CMS