CVE Feed

    Dashboard / CVE / CVE-2023-5098

    CVE-2023-5098

    The Campaign Monitor Forms by Optin Cat WordPress plugin before 2.5.6 does not prevent users with low privileges (like subscribers) from overwriting any options on a site with the string "true", which could lead to a variety of outcomes, including DoS.

    Published:Oct 31, 2023
    Last Modified:Apr 23, 2025
    EPS:Oct 31, 2023
    EPSS Score:0.00366
    CVSS Score:8.1

    Affected Products

    Vendor
    Fatcatapps
    Product
    Campaign Monitor Optin Cat

    Exploits

    https://wpscan.com/vulnerability/3167a83c-291e-4372-a42e-d842205ba722https://wpscan.com/vulnerability/3167a83c-291e-4372-a42e-d842205ba722

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High