A vulnerability, which was classified as critical, was found in Infused Addons InfusedWoo Pro Plugin up to 5.1.2 on WordPress. Affected by this issue is the function popup_submit. Such manipulation leads to server-side request forgery.

This vulnerability is listed as CVE-2026-6514. The attack may be performed from remote. There is no available exploit.