CVE-2026-14603
Description
The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database.
Metadata
Severity & Metrics
No CVSS data available.
Affected products (1)
| Vendor | Product | Platform | Versions |
|---|---|---|---|
| Unknown | WowOptin: Next-Gen Popup Maker | — | 0 < 1.4.38 |
Weakness (CWE)
| CWE | Source | Description |
|---|---|---|
| — | cna | CWE-284 Improper Access Control |