Filtered by vendor Optimole Subscriptions
Filtered by product Optimole Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2026-102375 2 Optimole, Wordpress-extensions 2 Optimole, Optimole 2026-10-07 6.5 Medium
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optimole: from n/a through 4.2.14.
CVE-2026-84829 2 Optimole, Wordpress 2 Optimole, Wordpress 2026-09-17 8.8 High
The Optimole WordPress plugin before 4.2.12 does not properly escape a user supplied value before using it to build an image tag attribute, allowing unauthenticated users to inject arbitrary attributes into pages served to every visitor, which leads to Stored Cross-Site Scripting.
CVE-2026-57673 2 Optimole, Wordpress 2 Optimole, Wordpress 2026-07-07 7.1 High
Unauthenticated Cross Site Scripting (XSS) in Optimole <= 4.2.7 versions.