Radar sectionsPlugins & themes
Check my site

WordPress plugin

Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors security & vulnerabilities

notifyvisitors-lead-form— active installsLast vulnerability May 11, 2023

Unpatched vulnerability in the latest version

At least one vulnerability affects the latest version and no fix has been released. Deactivate the plugin or restrict access to the affected feature until the vendor ships a patch.

1Known vulnerabilities
  • Critical0
  • High0
  • Medium1
  • Low0
Vulnerabilities per year
2023: 1 vulnerability123

All Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors vulnerabilities

Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors vulnerabilities
SeverityVulnerabilityCVEPublished
Medium4.4Authenticated (Administrator+) Stored Cross-Site Scripting via settings
≤1.0No patch available
CVE-2023-27426

Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors: common questions

Does Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors have known vulnerabilities?

Yes. VulnCrest Radar lists 1 known vulnerability in Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors: 1 medium. At least one is not fixed in the latest version.

How do I check which version of Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors I run?

In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.

What is the most recent Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors vulnerability?

CVE-2023-27426, published May 11, 2023: NotifyVisitors <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings. Severity: Medium (CVSS 4.4).

Is any Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors vulnerability listed in CISA KEV?

No. None of the known Free WordPress Lead Generation Opt in, Free Popups, Generated Lead Email Popup, Exit-Intent Popup – NotifyVisitors vulnerabilities is currently listed in the CISA KEV catalog.

Search VulnCrest Radar

Are you sure?