CVE-2022-2123: Wp Opt-In Project Wp Opt-In

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

The WP Opt-in WordPress plugin through 1.4.1 is vulnerable to CSRF which allows changed plugin settings and can be used for sending spam emails.

Affected products

• Wp Opt-In Project Wp Opt-In: up to and including 1.4.1

Published 2022-07-11. Last modified 2026-06-17.