CVE-2026-39700

The CVE CVE-2026-39700 affects the WPXPO WowOptin plugin for WordPress, with versions up to and including 1.4.32 vulnerable to a Missing Authorization issue due to incorrectly configured access control security levels. The root cause is an access control weakness that allows exploit without authe...

CVE-2026-39700

Missing Authorization vulnerability in WPXPO WowOptin optin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowOptin: from n/a through = 1.4.32...

WordPress WowOptin: Next-Gen Popup Maker plugin <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST API vulnerability

Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST API vulnerability discovered by Itthidej Aramsri Boeing777 in WordPress Plugin WowOptin versions = 1.4.29...