Noptin Newsletter Team vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1		CVE-2026-119468Noptin (WordPress plugin) · Cross-site Scripting High7.12026-11-04CVE Database V5CVE-2026-119468 CVE-2026-119468 is a stored cross-site scripting (XSS) vulnerability in the Noptin newsletter plugin affecting versions prior to 4.4.3. It allows improper neutralization of input during web page generation, potentially enabling attackers to inject malicious scripts. The issue is fixed in version 4.4.3. Vulnerability Noptin Newsletter Team	CVE Database V5	2026-11-04
Medium	5.9	EPSS 0.2%	CVE-2025-49871Noptin (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2025-06-17CVE Database V5CVE-2025-49871 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noptin Newsletter Team Noptin newsletter-optin-box allows Stored XSS.This issue affects Noptin: from n/a through <= 3.8.7. EPSS 0.2%Vulnerability Noptin Newsletter Team	CVE Database V5	2025-06-17

Page 1 of 1