PluginOps vulnerabilities and threats

13 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2026-27536MailChimp Subscribe Forms (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-08-13CVE Database V5CVE-2026-27536 Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions. EPSS 0.3%Vulnerability PluginOps CWE-79	CVE Database V5	2026-08-13
High	7.1	EPSS 0.3%	CVE-2026-57337Landing Page Builder (WordPress plugin) · Cross-site Scripting High7.1EPSS 0.3%2026-06-29CVE Database V5CVE-2026-57337 Unauthenticated Cross Site Scripting (XSS) in Landing Page Builder <= 1.5.3.5 versions. EPSS 0.3%Vulnerability PluginOps CWE-79	CVE Database V5	2026-06-29
Medium	5.9	EPSS 0.2%	CVE-2026-24620Landing Page Builder (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.2%2026-01-23CVE Database V5CVE-2026-24620 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder page-builder-add allows Stored XSS.This issue affects Landing Page Builder: from n/a through <= 1.5.3.4. EPSS 0.2%Vulnerability PluginOps	CVE Database V5	2026-01-23
Medium	4.3	EPSS 0.1%	CVE-2025-62107Feather Login Page (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.1%2025-12-22CVE Database V5CVE-2025-62107 Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page feather-login-page allows Cross Site Request Forgery.This issue affects Feather Login Page: from n/a through <= 1.1.7. EPSS 0.1%Vulnerability PluginOps	CVE Database V5	2025-12-22
High	8.8	EPSS 0.5%	CVE-2025-60126Testimonial Slider (WordPress plugin) · Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File High8.8EPSS 0.5%2025-09-26CVE Database V5CVE-2025-60126 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in PluginOps Testimonial Slider testimonial-add allows PHP Local File Inclusion.This issue affects Testimonial Slider: from n/a through <= 3.5.8.6. EPSS 0.5%Vulnerability PluginOps CWE-98	CVE Database V5	2025-09-26
Medium	5.3	EPSS 0.5%	CVE-2025-30581Top Bar (WordPress plugin) · Missing Authorization Medium5.3EPSS 0.5%2025-03-24CVE Database V5CVE-2025-30581 Missing Authorization vulnerability in PluginOps Top Bar ultimate-bar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top Bar: from n/a through <= 3.3. EPSS 0.5%Vulnerability PluginOps	CVE Database V5	2025-03-24
Medium	6.5	EPSS 0.2%	CVE-2025-22727MailChimp Subscribe Forms (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.2%2025-01-21CVE Database V5CVE-2025-22727 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms mailchimp-subscribe-sm allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through <= 4.1. EPSS 0.2%Vulnerability PluginOps	CVE Database V5	2025-01-21
Medium	6.5	EPSS 0.4%	CVE-2024-51858Social Locker (WordPress plugin) · Cross-site Scripting Medium6.5EPSS 0.4%2024-11-19CVE Database V5CVE-2024-51858 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Social Locker social-locker-content allows Stored XSS.This issue affects Social Locker: from n/a through <= 1.1. EPSS 0.4%Vulnerability PluginOps	CVE Database V5	2024-11-19
Medium	5.9	EPSS 0.4%	CVE-2024-43211MailChimp Subscribe Forms (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.4%2024-11-01CVE Database V5CVE-2024-43211 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps MailChimp Subscribe Forms allows Stored XSS.This issue affects MailChimp Subscribe Forms : from n/a through 4.0.9.9. EPSS 0.4%Vulnerability PluginOps CWE-79	CVE Database V5	2024-11-01
High	7.5	EPSS 0.5%	CVE-2024-43345Landing Page Builder (WordPress plugin) · Path Traversal High7.5EPSS 0.5%2024-08-19CVE Database V5CVE-2024-43345 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PluginOps Landing Page Builder allows PHP Local File Inclusion.This issue affects Landing Page Builder: from n/a through 1.5.2.0. EPSS 0.5%Vulnerability PluginOps CWE-22	CVE Database V5	2024-08-19
High	7.1	EPSS 0.3%	CVE-2024-34752Landing Page Builder (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-05-17CVE Database V5CVE-2024-34752 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PluginOps Landing Page Builder allows Reflected XSS.This issue affects Landing Page Builder: from n/a through 1.5.1.8. EPSS 0.3%Vulnerability PluginOps CWE-79	CVE Database V5	2024-05-17
Medium	4.3	EPSS 0.2%	CVE-2024-31923Feather Login Page (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-04-15CVE Database V5CVE-2024-31923 Cross-Site Request Forgery (CSRF) vulnerability in PluginOps Feather Login Page.This issue affects Feather Login Page: from n/a through 1.1.5. EPSS 0.2%Vulnerability PluginOps CWE-352	CVE Database V5	2024-04-15
Medium	5.9	EPSS 0.4%	CVE-2024-30452Landing Page Builder (WordPress plugin) · Cross-site Scripting Medium5.9EPSS 0.4%2024-03-29CVE Database V5CVE-2024-30452 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PluginOps Landing Page Builder allows Stored XSS.This issue affects Landing Page Builder: from n/a through 1.5.1.7. EPSS 0.4%Vulnerability PluginOps CWE-79	CVE Database V5	2024-03-29

Page 1 of 1