Plugin icon

Popup Builder & Popup Maker for WordPress – OptinMonster Email Marketing and Lead Generation

optinmonster

Vulnerabilities:

6

Last Updated:

November 19, 2025

Active Installs:

1000000

Published
Title
Fixed in
CVSS
Published
2024-05-24
Title
Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation < 2.16.2 - Contributor+ Stored Cross-Site Scripting
Fixed in
Fixed in 2.16.2
CVSS
6.4 (medium)
Published
2024-04-26
Title
Popup Builder by OptinMonster – WordPress Popups for Optins, Email Newsletters and Lead Generation < 2.16.0 - Cross-Site Request Forgery to Notice Dismissal
Fixed in
Fixed in 2.16.0
CVSS
4.3 (medium)
Published
2023-02-14
Title
Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosure
Fixed in
Fixed in 2.12.2
CVSS
6.5 (medium)
Published
2021-10-27
Title
OptinMonster < 2.6.5 - Unprotected REST-API Endpoints
Fixed in
Fixed in 2.6.5
CVSS
7.2 (high)
Published
2021-09-21
Title
OptinMonster < 2.6.1 - Reflected Cross-Site Scripting (XSS)
Fixed in
Fixed in 2.6.1
CVSS
6.1 (medium)
Published
2016-03-22
Title
OptinMonster <= 1.1.4.5 - Execution of Arbitrary Shortcodes
Fixed in
Fixed in 1.1.4.6
CVSS
5.3 (medium)