CPE
The MailOptin WordPress plugin contains a vulnerability in the subscribe_to_email_list endpoint that allows unauthenticated attackers to overwrite arbitrary user accounts, including administrators, via insecure parameter handling.