WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation
WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation has 4 disclosed vulnerabilities in the WordSec catalog, all reported in 2026; all 4 are fixed as of October 2026. Their average CVSS score is 6.7, and the most serious one scores 8.8 out of 10. Severity breakdown: 0 critical and 2 high. 2026 was the busiest year with 4 disclosures.
The most common weakness is Missing Authorization, behind 3 of the records (75%). Other recurring categories include Server-Side Request Forgery (SSRF).
Every one of the 4 issues recorded for WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation has a vendor fix available, so running the current release closes all known holes.
3 independent researchers contributed these findings, most of them (2) reported by Itthidej Aramsri (Boeing777).
CVE-2026-1720WowOptin: Next-Gen Popup Maker – Create Stunning Popups and Optins for Lead Generation <= 1.4.24 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation
Read the full analysisVulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C