Beveiligingsadvies

CVE-2026-1720

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-05 13:24:00

Laatst bijgewerkt 2026-04-08 17:31:43

Toegewezen door Wordfence

CVSS-score 8.8

Status PUBLISHED

Beschrijving

The WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation plugin for WordPress is vulnerable to unauthorized arbitrary plugin installation due to a missing capability check on the 'install_and_active_plugin' function in all versions up to, and including, 1.4.24. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins.

← Alle CVE's bekijken Bekijk op cve.org ↗