Advisories · Technology
wpxpo WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation.
Every CVE that names wpxpo WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.2 High
WowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthenticated Server-Side Request Forgery via 'link' Parameter in REST API
- wpxpo WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation
- Server-side request forgery (SSRF)
- CVSS 8.8 High
WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
- wpxpo WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation
- Broken access control