CVE-2026-14603

The CVE concerns the WowOptin: Next-Gen Popup Maker WordPress plugin, vulnerable before version 1.4.38. The issue is an improper authorization check on a REST endpoint, allowing unauthenticated users to disable all opt-in forms and insert new template-based opt-in rows into the site’s database. T...