crafium OptinCraft – Drag & Drop Optins & Popup Builder for WordPress

• CVE-2026-8978 Medium 4.9 OptinCraft <= 1.2.0 - Authenticated (Administrator+) SQL Injection via 'order_by' Parameter 0.3%