CVE-2026-14603

The CVE concerns the WowOptin: Next-Gen Popup Maker WordPress plugin, vulnerable before version 1.4.38. The issue is an improper authorization check on a REST endpoint, allowing unauthenticated users to disable all opt-in forms and insert new template-based opt-in rows into the site’s database. T...

EUVD-2026-48494

The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database...

PT-2023-29285 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions 8.5.13 and below Concrete CMS versions 9.0.0 through 9.2.1 Description: Multiple Cross Site Scripting XSS vulnerabilities in Concrete CMS allow a local attacker to execute arbitrary code via a crafted script to the Forms...