Plugin icon

MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.

mailoptin

Vulnerabilities:

8

Last Updated:

October 13, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-15
Title
MailOptin < 1.2.78.7 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter
Fixed in
Fixed in 1.2.78.7
CVSS
9.8 (critical)
Published
2026-07-29
Title
MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. < 1.2.78.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.2.78.1
CVSS
5.5 (medium)
Published
2026-07-09
Title
MailOptin < 1.2.78.0 - Unauthenticated Privilege Escalation
Fixed in
Fixed in 1.2.78.0
CVSS
9.8 (critical)
Published
2025-09-03
Title
MailOptin < 1.2.75.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.2.75.1
CVSS
4.4 (medium)
Published
2024-09-23
Title
Popup, Optin Form & Email Newsletters for Mailchimp, HubSpot, AWeber – MailOptin < 1.2.70.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Fixed in
Fixed in 1.2.70.4
CVSS
5.4 (medium)
Published
2023-01-20
Title
MailOptin 1.2.54.0 - Admin+ Stored XSS
Fixed in
Fixed in 1.2.54.1
CVSS
3.5 (low)
Published
2022-09-23
Title
MailOptin < 1.2.50.0 - Unauthenticated Campaign Cache Deletion
Fixed in
Fixed in 1.2.50.0
CVSS
5.3 (medium)
Published
2021-06-30
Title
MailOptin < 1.2.35.2 - Unauthorised AJAX Call
Fixed in
Fixed in 1.2.35.2
CVSS
4.3 (medium)