Patch Ticker

Noptin WordPress plugin stored XSS flaw

Visitors to WordPress newsletter sites can have malicious scripts run on them.

Summary

A stored cross-site scripting flaw in the Noptin newsletter plugin for WordPress lets malicious scripts be saved on a site and run for its visitors. Versions through 4.4.2 are affected.

What to do

Update Noptin to 4.4.3 or later.

Products and platforms

  • Noptin

CVE IDs

Times

First published

First seen