WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation

WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 4 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 4 disclosures.

The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Server-Side Request Forgery (SSRF).

Every one of the 4 issues recorded for WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation has a vendor fix available, so running the current release closes all known holes.

3 independent researchers contributed these findings, most of them (2) reported by Itthidej Aramsri (Boeing777).

Strategic Overview

Avg CVSSMedium
6.7/ 10
Patch Coverage100%
Open

0

Fixed

4

Get automatic notifications for all WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation vulnerabilities before they are exploited.

Highest severity on recordCVSS 8.8CVE-2026-1720

WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

Read the full analysis

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C