Medium · 4.3 CVE-2023-37891 EUVD-2023-41765GHSA-m33h-2h9f-7w8c

WordPress Exit Popups & Onsite Retargeting by OptiMonk Plugin <= 2.0.4 is vulnerable to Cross Site Request Forgery (CSRF)

Published Oct 3, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Cross-Site Request Forgery (CSRF) vulnerability in OptiMonk OptiMonk: Popups, Personalization & A/B Testing plugin <= 2.0.4 versions.

Vendor	Product	Affected	Fixed
OptiMonk	OptiMonk: Popups, Personalization & A/B Testing	≤ 2.0.4	—