Advisories · Technology
Optimole.
Every CVE that names Optimole among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Optimole 4.0.0 - 4.2.14 - Subscriber+ Sensitive Data Disclosure via Dashboard Widget
- Optimole
- Information disclosure
- CVSS 6.5 Medium
WordPress Optimole plugin <= 4.2.14 - Broken Access Control vulnerability
- Optimole
- Broken access control
- CVSS 6.8 Medium
Optimole 4.0.0 - 4.2.12 - Author+ Stored XSS via Video Player Block
- Optimole
- Cross-site scripting (XSS)
- CVSS 8.8 High
Optimole < 4.2.12 - Unauthenticated Stored XSS via Srcset Descriptor Parameter
- Optimole
- Cross-site scripting (XSS)
- CVSS 7.1 High
WordPress Optimole plugin <= 4.2.7 - Cross Site Scripting (XSS) vulnerability
- Optimole
- Cross-site scripting (XSS)