CVE-2026-57813

CriticalCVSS 9.8

Published: 13/07/2026(UTC)Updated: 13/07/2026(UTC)Translated: 14/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.48%

38th percentile - higher than 38% of all known CVEs

Summary

The MailOptin WordPress plugin contains an incorrect privilege assignment vulnerability that allows privilege escalation. This issue affects versions from n/a through 1.2.77.3 inclusive.

Risk Assessment

An attacker can exploit this vulnerability to gain elevated privileges in the system, potentially leading to full control over the WordPress site and access to sensitive data.

Recommendation

Immediately update the MailOptin plugin to the latest available version that fixes this vulnerability. If no update is available, consider temporarily disabling the plugin.

Original NVD description (English source)

Incorrect Privilege Assignment vulnerability in properfraction MailOptin mailoptin allows Privilege Escalation.This issue affects MailOptin: from n/a through <= 1.2.77.3.