A critical Server-Side Request Forgery vulnerability in the WowOptin WordPress plugin allows unauthenticated attackers to perform unauthorized requests against internal infrastructure.

The plugin exposes a REST API endpoint, optn/v1/integration-action, which fails to perform capability checks and passes user-supplied URLs to remote request functions without validation. This allows an unauthenticated attacker to force the server to interact with arbitrary internal or external network resources.

This vulnerability carries a CVSS score of 7.2, indicating a high severity risk. Successful exploitation could lead to unauthorized access to internal services or sensitive data, which are typically protected by network firewalls. This exposure could facilitate further network reconnaissance or lateral movement within the environment.

Immediate Action: Discontinue use of the plugin or restrict access to the affected REST API endpoints until a security update that addresses the missing capability checks is released and verified.

Proactive Monitoring: Monitor server access logs and web traffic for suspicious requests directed toward the optn/v1/integration-action REST endpoint.

Compensating Controls: Implement a Web Application Firewall (WAF) rule to block unauthorized access to the vulnerable REST API path used by the plugin.

Public Exploit Available: exploit_available (unknown)

Given the unauthenticated nature of this vulnerability and the potential for internal network exposure, administrators should prioritize the remediation of this plugin. If an update from the vendor is not currently available, the plugin should be disabled to prevent potential exploitation until a patched version is confirmed.