The WPXPO WowOptin plugin suffers from a missing authorization vulnerability in versions up to 1.4.32. This flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized modification or manipulation of plugin functionality. The CVSS v3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact. No official remediation or patch information is available as of the publication date.

The vulnerability allows unauthorized users to perform actions that should be restricted, potentially leading to integrity violations within the WowOptin plugin. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the plugin's administrative interfaces and monitor for unusual activity related to WowOptin. Avoid exposing the plugin to untrusted users where possible.