VYPR

WowRevenue

by WordPress

CVEs (1)

  • CVE-2026-2001HigFeb 16, 2026
    risk 0.57cvss 8.8epss 0.00

    The WowRevenue plugin for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'Notice::install_activate_plugin' function in all versions up to, and including, 2.1.3. This makes it possible for authenticated attackers, with…