PatchTheCVEwp opt-in vulnerabilities and fixes
Recent CVEs affecting wp opt-in, with upgrade or downgrade steps. 1 tracked.
Also searched as: wp opt in, wpopt-in.
wp opt-in has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-07-11. Highest priority: CVE-2022-2123 (score 29/100).
- CVE-2022-2123 MEDIUM 4.3 UPGRADE The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and ca
FAQ
How do I fix wp opt-in vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp opt-in being exploited right now?
None of the tracked wp opt-in CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp opt-in CVE should I patch first?
CVE-2022-2123 currently ranks highest (29/100): The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and ca.