Optinlyhq vulnerabilities
4 vulnerabilities
Known vulnerabilities in Optinlyhq products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Gozen Forms2 vulnerabilities
- Optinly1 vulnerabilities
- Optinly – Exit Intent, Newsletter Popups, Gamification & Opt In Forms1 vulnerabilities
CVE-2025-6783optinlyhqgozen_forms+1
EPSS score0.41%
The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the emdedSc() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2025-6782optinlyhqgozen_forms+1EPSS score0.40%
The GoZen Forms plugin for WordPress is vulnerable to SQL Injection via the 'forms-id' parameter of the dirGZActiveForm() function in all versions up to, and including, 1.1.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.CVE-2022-41134optinlyoptinly+2EPSS score0.28%
Cross-Site Request Forgery (CSRF) in OptinlyHQ Optinly – Exit Intent, Newsletter Popups, Gamification & Opt-in Forms plugin <= 1.0.15 versions.CVE-2024-37220optinlyhqoptinly+1EPSS score0.38%
Missing Authorization vulnerability in OptinlyHQ Optinly allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Optinly: from n/a through 1.0.18.