WordPress security by component

OptinCraft – Drag & Drop Optins & Popup Builder for WordPress

Plugin description

OptinCraft – Drag & Drop Optins & Popup Builder for WordPress is a WordPress component with 1 published CVE record in this archive. The latest tracked vulnerability was published Jun 06, 2026; the highest CVE/CNA score is 4.9.

Plugin slug: optincraft

Latest vulnerability

CVE-2026-8978: OptinCraft – Drag & Drop Optins & Popup Builder for WordPress: SQL injection

OptinCraft – Drag & Drop Optins & Popup Builder for WordPress is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 1.2.0.

PublishedJun 06, 2026

Known safe version> 1.2.0

		Safe version
Jun 06, 2026	CVE-2026-8978 OptinCraft – Drag & Drop Optins & Popup Builder for WordPress: SQL injection OptinCraft – Drag & Drop Optins & Popup Builder for WordPress is affected by SQL injection. Exploitation requires at least administrator-level access. A successful request can alter database queries and expose or modify WordPress data. The published affected range is <= 1.2.0.	> 1.2.0	CVE4.9 NVDPending