PluginOps
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Landing Page Builder | 6 | – | Jun 29, 2026 |
| MailChimp Subscribe Forms | 3 | – | Aug 13, 2026 |
| Feather Login Page | 2 | – | Dec 22, 2025 |
| MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder | 1 | – | Dec 29, 2023 |
| Social Locker | 1 | – | Nov 19, 2024 |
| Testimonial Slider | 1 | – | Sep 26, 2025 |
| Top Bar | 1 | – | Mar 24, 2025 |
| Landing Page Builder – Lead Page – Optin Page – Squeeze Page – WordPress Landing Pages | 1 | – | Dec 7, 2023 |
| MailChimp Subscribe Form | 1 | – | May 28, 2023 |
Exploited and recent CVEs
- CVE-2026-27536 WordPress MailChimp Subscribe Forms plugin <= 4.3.3 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-57337 WordPress Landing Page Builder plugin <= 1.5.3.5 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2026-24620 WordPress Landing Page Builder plugin <= 1.5.3.4 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2025-62107 WordPress Feather Login Page plugin <= 1.1.7 - Cross Site Request Forgery (CSRF) vulnerability 0.1%
- CVE-2025-60126 WordPress Testimonial Slider Plugin <= 3.5.8.6 - Local File Inclusion Vulnerability 0.5%
- CVE-2025-30581 WordPress Top Bar plugin <= 3.3 - Broken Access Control Vulnerability 0.5%
- CVE-2025-22727 WordPress MailChimp Subscribe Form plugin <= 4.1 - Cross Site Scripting (XSS) vulnerability 0.2%
- CVE-2024-51858 WordPress Social Locker plugin <= 1.1 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2024-43211 WordPress MailChimp Subscribe Form plugin <=4.0.9.9 - Stored Cross-Site Scripting vulnerability 0.4%
- CVE-2024-43345 WordPress Landing Page Builder plugin <= 1.5.2.0 - Local File Inclusion vulnerability 0.5%
- CVE-2024-34752 WordPress Landing Page Builder <= 1.5.1.8 - Cross Site Scripting (XSS) vulnerability 0.3%
- CVE-2024-31923 WordPress Feather Login Page plugin <= 1.1.5 - Cross Site Request Forgery (CSRF) vulnerability 0.2%
- CVE-2024-30452 WordPress Landing Page Builder plugin <= 1.5.1.7 - Cross Site Scripting (XSS) vulnerability 0.4%
- CVE-2023-32517 WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.3 is vulnerable to Open Redirection 0.4%
- CVE-2023-48325 WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection 0.4%
- CVE-2023-40675 WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS) 0.4%
- CVE-2023-33328 WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.1 is vulnerable to Cross Site Scripting (XSS) 0.4%