← All advisories

Medium severity4.3NVD Advisory· Published Jul 11, 2022· Updated Jun 17, 2026

CVE-2022-2123

CVE-2022-2123

Description

The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WordPress/WP Opt-indescription
WordPress/Wpoptinllm-create
Range: <=1.4.1
Package: https://wordpress.org/plugins/wpoptin
Wp Opt In Project/Wp Opt In
cpe:2.3:a:wp_opt-in_project:wp_opt-in:*:*:*:*:*:wordpress:*:*
Range: <=1.4.1

Patches

Vulnerability mechanics

References

1

wpscan.com/vulnerability/46b634f6-92bc-4e00-a4c0-c25135c61922nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.