Advisories · Technology

crafium OptinCraft – Drag & Drop Optins & Popup Builder for WordPress.

Every CVE that names crafium OptinCraft – Drag & Drop Optins & Popup Builder for WordPress among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-8978 CVE record

CVSS 4.9 Medium

OptinCraft <= 1.2.0 - Authenticated (Administrator+) SQL Injection via 'order_by' Parameter
- crafium OptinCraft – Drag & Drop Optins & Popup Builder for WordPress
- SQL injection
Not analysed yet 6 Jun 2026