MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. vulnerabilities

Product

MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc.

by properfraction · last CVE Oct 16, 2026

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities2 In the news0 Timeline

Severity mix

Critical 1High 0Medium 1Low 0

Severity

All severities2 Critical1 High0 Medium1 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add MailOptin – Popup, Optin Forms & Email Newsletters for Mailchimp, HubSpot, AWeber Etc. to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-109515	9.8	0%	Oct 16	MailOptin <= 1.2.78.6 - Unauthenticated Privilege Escalation to 'form_custom_field_mappings' Parameter Affected: through 1.2.78.6