WowOptin: Next-Gen Popup Maker <= 1.4.29 - Unauthentifizierter Server-Side Request Forgery über den 'link'-Parameter in der REST API

The SSRF vulnerability in WowOptin allows an attacker to craft malicious URLs that are then processed by the plugin's wpremoteget() and wpremotepost() functions without proper validation. This means an attacker can potentially trigger requests to internal services or resources that are not directly accessible from the outside. For example, an attacker could attempt to access internal admin panels, database servers, or other sensitive systems within the WordPress environment. The lack of authentication required to exploit this vulnerability significantly increases the potential attack surface, as any unauthenticated user can trigger the SSRF. This vulnerability is similar in nature to other SSRF vulnerabilities where attackers leverage internal network access to gain further control or exfiltrate sensitive data.

WordPress websites using the WowOptin: Next-Gen Popup Maker plugin, particularly those with limited network segmentation or internal services accessible from the web server, are at risk. Shared hosting environments where users have limited control over plugin configurations are also particularly vulnerable.

• wordpress / composer / npm:

grep -r 'optn/v1/integration-action' /var/www/html/wp-content/plugins/wow-optin-next-gen-popup-maker/

• generic web:

curl -I https://your-wordpress-site.com/optn/v1/integration-action  # Check for 200 OK response indicating endpoint exposure

1. 2026-03-21Disclosure

   disclosure

1. Reserviert2026-03-16
2. Veröffentlicht2026-03-21
3. Geändert2026-04-08
4. EPSS aktualisiert2026-03-28

The primary mitigation for CVE-2026-4302 is to immediately upgrade the WowOptin: Next-Gen Popup Maker plugin to version 1.4.30 or later. If upgrading is not immediately feasible, consider implementing a Web Application Firewall (WAF) rule to block requests to the optn/v1/integration-action endpoint. Alternatively, restrict network access to the WordPress server to only allow outbound connections to trusted domains. Review and audit any existing integration actions to ensure they are not susceptible to SSRF vulnerabilities. After upgrading, confirm the vulnerability is resolved by attempting to access an internal resource via the vulnerable endpoint and verifying that the request is blocked or fails.

Aktive Installationen

1KBekannt

Plugin-Bewertung