https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T11:33:15.730778+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-39341 CVE-2021-39341 — OptinMonster <= 2.6.4 Unprotected REST-API Endpoints 2026-10-08T11:33:15.731979+00:00

Affected: OptinMonster

The OptinMonster WordPress plugin is vulnerable to sensitive information disclosure and unauthorized setting updates due to insufficient authorization validation via the logged_in_or_has_api_key function in the ~/OMAPI/RestApi.php file that can used to exploit inject malicious web scripts on sites with the plugin installed. This affects versions up to, and including, 2.6.4.