WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation vulnerabilities

2 known vulnerabilities in WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation from Wpxpo. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WowOptin: Next-Gen Popup Maker – Create…: Server-Side Request Forgery

  CVE-2026-4302Mar 21, 2026Wpxpo

  The WowOptin: Next-Gen Popup Maker plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.29. This is due to the plugin exposing a publicly accessible REST API endpoint (optn/v1/integration-action) with a pe

• 8.8 High severity

  WowOptin: Next-Gen Popup Maker – Create…: Missing Authorization

  CVE-2026-1720Mar 5, 2026Wpxpo

  The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the 'install_and_active_plugin' function in all ver