Plugin icon

Noptin – Newsletter, New Post Notifications & Email Automation

newsletter-optin-box

Vulnerabilities:

5

Last Updated:

October 5, 2026

Active Installs:

10000

Published
Title
Fixed in
CVSS
Published
2026-10-09
Title
Simple Newsletter Plugin < 4.4.0 - Unauthenticated Stored Cross-Site Scripting via Subscriber Custom Field via Manage Preferences Form + Campaign Preview noptin_key Pivot
Fixed in
Fixed in 4.4.0
CVSS
5.4 (medium)
Published
2026-08-24
Title
Noptin < 4.3.3 - Unauthenticated Subscriber PII and confirm_key Disclosure via Actions Page
Fixed in
Fixed in 4.3.3
CVSS
6.5 (medium)
Published
2025-06-12
Title
Noptin < 4.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Fixed in
Fixed in 4.0.0
CVSS
4.4 (medium)
Published
2024-07-01
Title
Noptin < 3.4.3 - Missing Authorization to Unauthenticated Form Submission
Fixed in
Fixed in 3.4.3
CVSS
5.3 (medium)
Published
2022-01-17
Title
Noptin < 1.6.5 - Open Redirect
Fixed in
Fixed in 1.6.5
CVSS
4.3 (medium)