Skip to content
OpenAdvisories

Vendor

PluginOps

17 known vulnerabilities.

Products

Landing Page Builder 6 MailChimp Subscribe Forms 3 Feather Login Page 2 Social Locker 1 MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder 1 MailChimp Subscribe Form 1 Top Bar 1 Testimonial Slider 1 Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages 1
All Critical High Medium Low Exploited only

12 results · Clear filters · Feed

  • Medium 5.9
    CVE-2026-24620

    WordPress Landing Page Builder plugin <= 1.5.3.4 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through <= 1.5.3.4.

    PluginOps Landing Page Builder
  • Medium 4.3
    CVE-2025-62107

    WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through <= 1.1.7.

    PluginOps Feather Login Page
  • Medium 5.3
    CVE-2025-30581

    WordPress Top Bar plugin <= 3.3 - Broken Access Control Vulnerability

    Missing Authorization vulnerability in PluginOps Top Bar ultimate-bar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top Bar: from n/a through <= 3.3.

    PluginOps Top Bar
  • Medium 6.5
    CVE-2025-22727

    WordPress MailChimp Subscribe Form plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms mailchimp-subscribe-sm allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through <= 4.1.

    PluginOps MailChimp Subscribe Forms
  • Medium 6.5
    CVE-2024-51858

    WordPress Social Locker plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Social Locker social-locker-content allows Stored XSS.This issue affects Social Locker: from n/a through <= 1.1.

    PluginOps Social Locker
  • Medium 5.9
    CVE-2024-43211

    WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9.

    PluginOps MailChimp Subscribe Forms
  • Medium 4.3
    CVE-2024-31923

    WordPress Feather Login Page plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability

    Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page.This issue affects Feather Login Page: from n/a through 1.1.5.

    PluginOps Feather Login Page
  • Medium 5.9
    CVE-2024-30452

    WordPress Landing Page Builder plugin <= 1.5.1.7 - Cross Site Scripting (XSS) vulnerability

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder allows Stored XSS.This issue affects Landing Page Builder: from n/a through 1.5.1.7.

    PluginOps Landing Page Builder
  • Medium 4.7
    CVE-2023-32517

    WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9…

    PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder
  • Medium 4.7
    CVE-2023-48325

    WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection

    URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages.This issue affects Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress L…

    PluginOps Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages Web / CMS
  • Medium 5.9
    CVE-2023-40675

    WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps Landing Page Builder plugin <= 1.5.1.2 versions.

    PluginOps Landing Page Builder
  • Medium 5.9
    CVE-2023-33328

    WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.1 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PluginOps MailChimp Subscribe Form plugin <= 4.0.9.1 versions.

    PluginOps MailChimp Subscribe Form