CVE-2026-1720

🗓️ 05 Mar 2026 13:24:00Reported by WordfenceType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 7 Views

WowOptin plugin lacks authorization, enabling subscribers to install plugins up to version 1.4.24.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-1720	5 Mar 202613:24	–	attackerkb
Circl	CVE-2026-1720	5 Mar 202613:53	–	circl
CNNVD	WordPress plugin WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation 安全漏洞	5 Mar 202600:00	–	cnnvd
Cvelist	CVE-2026-1720 WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation	5 Mar 202613:24	–	cvelist
EUVD	EUVD-2026-9819	5 Mar 202615:30	–	euvd
NVD	CVE-2026-1720	5 Mar 202614:16	–	nvd
Patchstack	WordPress WowOptin: Next-Gen Popup Maker - Create Stunning Popups and Optins for Lead Generation plugin <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary plugin Installation vulnerability	6 Mar 202608:36	–	patchstack
Positive Technologies	PT-2026-23448	5 Mar 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-1720	6 Mar 202614:37	–	redhatcve
Wordfence Blog	Wordfence Intelligence Weekly WordPress Vulnerability Report (March 2, 2026 to March 8, 2026)	12 Mar 202619:00	–	wordfence

Vulners

Node

wpxpo wowoptin:_next-gen_popup_maker_create_stunning_popups_and_optins_for_lead_generationRange≤1.4.24wordpress

[
  {
    "vendor": "wpxpo",
    "product": "WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation",
    "versions": [
      {
        "version": "0",
        "status": "affected",
        "lessThanOrEqual": "1.4.24",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
plugins	www.plugins.trac.wordpress.org/browser/optin/trunk/includes/utils/class-notice.php
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/ee0c0e29-b117-4480-b5b7-995878af8c57
plugins	www.plugins.trac.wordpress.org/changeset/3456826/

17 Jun 2026 10:16Current

6Medium risk

Vulners AI Score6

CVSS 3.18.8

EPSS0.00276

CWE-862