CVE-2026-14603

The WowOptin: Next-Gen Popup Maker WordPress plugin (versions before 1.4.38 ) is vulnerable to an improper access control flaw on a REST endpoint . This lack of proper authorization allows unauthenticated users to perform unauthorized actions, specifically the ability to disable all opt-in forms ...