CVE-2026-1720 | WowOptin Plugin up to 1.4.24 on WordPress Plugin Installation install_and_active_plugin authorization

A vulnerability described as critical has been identified in WowOptin Plugin up to 1.4.24 on WordPress. This affects the function install_and_active_plugin of the component Plugin Installation Handler. Such manipulation leads to missing authorization.

This vulnerability is listed as CVE-2026-1720. The attack may be performed from remote. There is no available exploit.