CVE-2026-39700

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.16%

5th percentile - higher than 5% of all known CVEs

Summary

Missing authorization in the WowOptin plugin allows exploiting incorrectly configured access control security levels. The issue affects versions up to and including 1.4.32.

Risk Assessment

An attacker could gain unauthorized access to opt-in functions, potentially leading to user privacy breaches and data leakage.

Recommendation

Update the WowOptin plugin to the latest version that includes a fix for the missing authorization.

Original NVD description (English source)

Missing Authorization vulnerability in WPXPO WowOptin optin allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WowOptin: from n/a through <= 1.4.32.