Advisories · Technology

Noptin.

Every CVE that names Noptin among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-119468 CVE record

CVSS 7.1 High

WordPress Noptin plugin <= 4.4.2 - Cross Site Scripting (XSS) vulnerability
- Noptin
- Cross-site scripting (XSS)
Not analysed yet 4 Nov 2026
CVE-2025-49871 CVE record

CVSS 5.9 Medium

WordPress Noptin plugin <= 3.8.7 - Cross Site Scripting (XSS) Vulnerability
- Noptin
- Cross-site scripting (XSS)
Not analysed yet 17 Jun 2025
CVE-2024-37456 CVE record

CVSS 5.3 Medium

WordPress Simple Newsletter Plugin – Noptin plugin <= 3.4.2 - Broken Access Control vulnerability
- Noptin
- Broken access control
Not analysed yet 1 Nov 2024