A vulnerability was found in WowRevenue Plugin up to 2.1.3 on WordPress. It has been classified as problematic. This affects the function
Notice::install_activate_plugin of the component Plugin Installation Handler. This manipulation causes missing authorization.
This vulnerability appears as CVE-2026-2001. The attack may be initiated remotely. There is no available exploit.