Keap Official Opt-in Forms vulnerabilities
1 known vulnerability in Keap Official Opt-in Forms from Infusionsoft. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest first
- 9.8 Critical severity
Keap Official Opt-in Forms: Improper Limitation of a Pathname to a Restricted Directory
The Keap Official Opt-in Forms plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.0.1 via the service parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing t