Medium · 5.4 CVE-2022-41134 EUVD-2022-44376GHSA-5fw2-7ccx-9pc8

WordPress Optinly Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)

Published Feb 13, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin <= 1.0.15 versions.

Vendor	Product	Affected	Fixed
OptinlyHQ	Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms	≤ 1.0.15	—