PT-2026-26795 · WordPress · Wowoptin: Next-Gen Popup Maker
CVSS v3.1
7.2
Alta
| Vetor | AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
WowOptin: Next-Gen Popup Maker plugin for WordPress versions through 1.4.29
Description
The WowOptin: Next-Gen Popup Maker plugin for WordPress is susceptible to Server-Side Request Forgery (SSRF). This is caused by a publicly accessible REST API endpoint,
/optn/v1/integration-action, utilizing a permission callback of return true. The plugin passes user-supplied URLs directly to the functions wp remote get() and wp remote post() within the Webhook::add subscriber() method without validating or restricting the URLs. The plugin does not employ wp safe remote get() or wp safe remote post(), which offer built-in SSRF protection. This allows unauthenticated attackers to make web requests to arbitrary locations from the web application, potentially enabling them to query and modify information from internal services.Recommendations
Versions prior to 1.4.29 should be updated. As a temporary workaround, restrict access to the
/optn/v1/integration-action API endpoint.Correção
SSRF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Wowoptin: Next-Gen Popup Maker