CVE-2026-14603
WowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection
CVSS Score
7.5
EPSS Score
0.1%
EPSS Percentile
3th
The WowOptin: Next-Gen Popup Maker WordPress plugin before 1.4.38 does not have proper authorization on a REST endpoint, allowing unauthenticated users to disable all of the site's opt-in forms and insert new template-based opt-in rows into the database.
| Vendor | unknown |
| Product | wowoptin: next-gen popup maker |
| Published | Jul 24, 2026 |
| Last Updated | Jul 24, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown wowoptin: next-gen popup maker
Be the first to know when new high vulnerabilities affecting unknown wowoptin: next-gen popup maker are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / WowOptin: Next-Gen Popup Maker
0 < 1.4.38
References
Credits
Pedro Pinho WPScan