CVE-2026-119616 | picocodes Noptin Plugin up to 4.4.3 on WordPress Manage Preferences Page noptin_fields[first_name] file inclusion

November 7, 2026 Yanac

A vulnerability marked as problematic has been reported in picocodes Noptin Plugin up to 4.4.3 on WordPress. Affected by this issue is some unknown functionality of the component Manage Preferences Page. The manipulation of the argument noptin_fields[first_name] leads to file inclusion.

This vulnerability is documented as CVE-2026-119616. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More